From 5de9e5baf49e5cef7e6e13a1c8e480fd1e4e9923 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Thu, 15 Jun 2023 14:46:46 -0400
Subject: [PATCH] allow sensor to logstash on receiver

---
 salt/firewall/defaults.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/firewall/defaults.yaml b/salt/firewall/defaults.yaml
index 638bc85ff..45567de91 100644
--- a/salt/firewall/defaults.yaml
+++ b/salt/firewall/defaults.yaml
@@ -1161,7 +1161,9 @@ firewall:
           hostgroups:
             sensor:
               portgroups:
+                - beats_5044
                 - beats_5644
+                - elastic_agent_data
             searchnode:
               portgroups:
                 - redis