diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
index 8ae75f984..33362825f 100644
--- a/salt/elasticsearch/defaults.yaml
+++ b/salt/elasticsearch/defaults.yaml
@@ -4187,6 +4187,7 @@ elasticsearch:
     so-syslog:
       index_sorting: False
       index_template:
+        data_stream: {}
         index_patterns:
           - logs-syslog-so*
         template: