diff --git a/salt/logstash/enabled.sls b/salt/logstash/enabled.sls
index c0129c6e1..91433cba8 100644
--- a/salt/logstash/enabled.sls
+++ b/salt/logstash/enabled.sls
@@ -12,7 +12,9 @@
 {%   set lsheap = LOGSTASH_MERGED.settings.lsheap %}
 
 include:
+{%   if GLOBALS.role not in ['so-receiver','so-fleet'] %}
   - elasticsearch.ca
+{%   endif %}
   - logstash.config
   - logstash.sostatus