diff --git a/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-start b/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-start
index d9c63f8ea..c13d91fe5 100755
--- a/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-start
+++ b/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-start
@@ -1,4 +1,4 @@
-/bin/bash
+#!/bin/bash
 # Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
 # or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
 # https://securityonion.net/license; you may not use this file except in compliance with the
@@ -6,6 +6,6 @@
 
 . /usr/sbin/so-common
 
-
 echo "Starting ILM..."
 curl -K /opt/so/conf/elasticsearch/curl.config -s -k -L -X POST https://localhost:9200/_ilm/start
+echo
diff --git a/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-stop b/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-stop
index 034082699..e53a4939a 100755
--- a/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-stop
+++ b/salt/elasticsearch/tools/sbin/so-elasticsearch-ilm-stop
@@ -8,3 +8,4 @@
 
 echo "Stopping ILM..."
 curl -K /opt/so/conf/elasticsearch/curl.config -s -k -L -X POST https://localhost:9200/_ilm/stop
+echo
diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml
index d756489e1..f1ec6e452 100644
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1465,9 +1465,9 @@ soc:
           playbookImportFrequencySeconds: 86400
           playbookImportErrorSeconds: 600
           playbookRepoUrl: https://github.com/Security-Onion-Solutions/securityonion-resources
-          playbookRepoBranch: playbook-stable
+          playbookRepoBranch: playbooks-stable
           playbookRepoPath: /opt/sensoroni/playbooks/
-          playbookPathInRepo: playbook/dev
+          playbookPathInRepo: securityonion-normalized
         salt:
           queueDir: /opt/sensoroni/queue
           timeoutMs: 45000