From 676696b24a7cf3a62c9d56f64ea74125434ec03a Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 11 Jul 2023 15:48:22 -0400
Subject: [PATCH] restart strelka backend if rules change

---
 salt/strelka/backend/enabled.sls | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/strelka/backend/enabled.sls b/salt/strelka/backend/enabled.sls
index c2272cb84..fc56f4197 100644
--- a/salt/strelka/backend/enabled.sls
+++ b/salt/strelka/backend/enabled.sls
@@ -42,6 +42,8 @@ strelka_backend:
       {% endfor %}
     {% endif %}
     - restart_policy: on-failure
+    - watch:
+      - file: strelkarules
 
 delete_so-strelka-backend_so-status.disabled:
   file.uncomment: