diff --git a/salt/filebeat/defaults.yaml b/salt/filebeat/defaults.yaml
index cbad9a5a9..31ed8e0b0 100644
--- a/salt/filebeat/defaults.yaml
+++ b/salt/filebeat/defaults.yaml
@@ -43,8 +43,8 @@ filebeat:
     - bsap_serial_rdb_ext
     - bsap_serial_unknown
     - cip
-    - cip_io
     - cip_identity
+    - cip_io
     - cotp
     - dnp3_control
     - dnp3_objects