diff --git a/salt/elasticsearch/roles/analyst.json b/salt/elasticsearch/roles/analyst.json
index fc788e2f1..2fd10ab47 100644
--- a/salt/elasticsearch/roles/analyst.json
+++ b/salt/elasticsearch/roles/analyst.json
@@ -18,6 +18,7 @@
   "indices": [
     {
       "names": [
+        "logs-*",
         "so-*"
       ],
       "privileges": [
@@ -60,4 +61,4 @@
     }
   ],
   "run_as": []
-}
\ No newline at end of file
+}
diff --git a/salt/elasticsearch/roles/auditor.json b/salt/elasticsearch/roles/auditor.json
index 26df1207c..6669bd2f2 100644
--- a/salt/elasticsearch/roles/auditor.json
+++ b/salt/elasticsearch/roles/auditor.json
@@ -16,6 +16,7 @@
   "indices": [
     {
       "names": [
+        "logs-*",
         "so-*"
       ],
       "privileges": [
@@ -56,4 +57,4 @@
     }
   ],  
   "run_as": []
-}
\ No newline at end of file
+}
diff --git a/salt/elasticsearch/roles/limited-analyst.json b/salt/elasticsearch/roles/limited-analyst.json
index 2b3797dbc..9186b732e 100644
--- a/salt/elasticsearch/roles/limited-analyst.json
+++ b/salt/elasticsearch/roles/limited-analyst.json
@@ -4,6 +4,7 @@
   "indices": [
     {
       "names": [
+        "logs-*",
         "so-*"
       ],
       "privileges": [
@@ -46,4 +47,4 @@
     }
   ],
   "run_as": []
-}
\ No newline at end of file
+}
diff --git a/salt/elasticsearch/roles/limited-auditor.json b/salt/elasticsearch/roles/limited-auditor.json
index ecab5016a..902567523 100644
--- a/salt/elasticsearch/roles/limited-auditor.json
+++ b/salt/elasticsearch/roles/limited-auditor.json
@@ -4,6 +4,7 @@
   "indices": [
     {
       "names": [
+        "logs-*",
         "so-*"
       ],
       "privileges": [
@@ -44,4 +45,4 @@
     }
   ],  
   "run_as": []
-}
\ No newline at end of file
+}