From 706a6e2d56ca045f97e2393d270e01a406334928 Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Wed, 30 Aug 2023 08:34:04 -0400
Subject: [PATCH] Make sure a data stream is created for syslog

---
 salt/elasticsearch/defaults.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
index 8ae75f984..33362825f 100644
--- a/salt/elasticsearch/defaults.yaml
+++ b/salt/elasticsearch/defaults.yaml
@@ -4187,6 +4187,7 @@ elasticsearch:
     so-syslog:
       index_sorting: False
       index_template:
+        data_stream: {}
         index_patterns:
           - logs-syslog-so*
         template: