From e5a3a54aea80421b027afbed99eeed3d8382e557 Mon Sep 17 00:00:00 2001
From: Corey Ogburn <corey.ogburn@securityonionsolutions.com>
Date: Fri, 29 Mar 2024 14:31:43 -0600
Subject: [PATCH] Proper YAML

---
 salt/soc/defaults.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml
index 6fbbebd76..9ec22b180 100644
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -2021,11 +2021,11 @@ soc:
           queryBaseFilter: '_index:"*:so-detection" AND so_kind:detection'
           presets:
             manualSync:
-              customEnabled:false
+              customEnabled: false
               labels:
-                - Suricata
-                - Strelka
-                - ElastAlert
+              - Suricata
+              - Strelka
+              - ElastAlert
           eventFields:
             default:
               - so_detection.title