From 6e3986b0b074182af20ff07da08efb1a6b325c1d Mon Sep 17 00:00:00 2001
From: Josh Patterson <josh.patterson@securityonionsolutions.com>
Date: Thu, 19 Mar 2026 17:37:40 -0400
Subject: [PATCH] set community-id annotation to advanced

---
 salt/suricata/soc_suricata.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/suricata/soc_suricata.yaml b/salt/suricata/soc_suricata.yaml
index 7f6b7787a..254683443 100644
--- a/salt/suricata/soc_suricata.yaml
+++ b/salt/suricata/soc_suricata.yaml
@@ -211,6 +211,7 @@ suricata:
         community-id:
           description: Enable Community ID flow hashing for consistent event correlation across tools.
           forcedType: bool
+          advanced: True
           helpLink: suricata
         types:
           alert: