From 63884b73e13c0b61957142b093f607339f0a3340 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 5 Oct 2020 12:10:52 -0400
Subject: [PATCH] enable suricata threshold-file and point to proper file -
 https://github.com/Security-Onion-Solutions/securityonion/issues/1441

---
 salt/suricata/defaults.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/suricata/defaults.yaml b/salt/suricata/defaults.yaml
index f95bd5be7..ee34a8bf0 100644
--- a/salt/suricata/defaults.yaml
+++ b/salt/suricata/defaults.yaml
@@ -587,7 +587,7 @@ suricata:
       - all.rules
     classification-file: /etc/suricata/classification.config
     reference-config-file: /etc/suricata/reference.config
-    # threshold-file: /etc/suricata/threshold.config
+    threshold-file: /etc/suricata/threshold.conf
     #include: include1.yaml
     #include: include2.yaml