diff --git a/salt/elasticsearch/files/ingest/strelka.file b/salt/elasticsearch/files/ingest/strelka.file
index a2e08b799..ed80a4e5b 100644
--- a/salt/elasticsearch/files/ingest/strelka.file
+++ b/salt/elasticsearch/files/ingest/strelka.file
@@ -6,6 +6,7 @@
     { "rename":         { "field": "message2.scan",        "target_field": "scan",          "ignore_missing": true  } },
     { "rename":         { "field": "message2.request",        "target_field": "request",          "ignore_missing": true  } },
     { "rename":         { "field": "scan.hash",        "target_field": "hash",          "ignore_missing": true  } },
+    { "grok":           { "field": "request.attributes.filename",       "patterns": ["-%{WORD:log.id.fuid}-"] } },
     { "remove":         { "field": ["host", "path"],                                         "ignore_missing": true  } },
     { "pipeline":       { "name": "common"                                                                                   } }
   ]
diff --git a/salt/logstash/pipelines/config/so/9999_output_redis.conf.jinja b/salt/logstash/pipelines/config/so/9999_output_redis.conf.jinja
index 5bf2512d5..b50f72747 100644
--- a/salt/logstash/pipelines/config/so/9999_output_redis.conf.jinja
+++ b/salt/logstash/pipelines/config/so/9999_output_redis.conf.jinja
@@ -8,7 +8,7 @@ output {
 		key => 'logstash:unparsed'
 		congestion_interval => 1
 		congestion_threshold => 50000000
-		batch ==> True
+		batch => True
 		batch_events => {{ BATCH }}
 	}
 }
diff --git a/setup/so-setup b/setup/so-setup
index ede21760e..de71cf3df 100755
--- a/setup/so-setup
+++ b/setup/so-setup
@@ -623,7 +623,7 @@ fi
 if [[ $success != 0 || -z $SO_ERROR ]]; then whiptail_setup_failed
 else 
 	whiptail_setup_complete
-	if [[ $THEHIVE == 1 ]]; then check_hive_init; fi	
+	if [[ $THEHIVE == 1 ]]; then check_hive_init; fi
 fi
 
 install_cleanup >> $setup_log 2>&1