diff --git a/salt/filebeat/init.sls b/salt/filebeat/init.sls
index 9163547b0..ea04c0311 100644
--- a/salt/filebeat/init.sls
+++ b/salt/filebeat/init.sls
@@ -95,6 +95,14 @@ merged_module_conf:
     - template: jinja
     - defaults:
         MODULES: {{ MODULESENABLED }}
+
+so_module_conf_remove:
+  file.absent:
+    - name: /opt/so/conf/filebeat/modules/securityonion.yml
+
+thirdyparty_module_conf_remove:
+  file.absent:
+    - name: /opt/so/conf/filebeat/modules/thirdparty.yml
     
 so-filebeat:
   docker_container.running: