diff --git a/salt/top.sls b/salt/top.sls
index 6f7763c62..4af085ae1 100644
--- a/salt/top.sls
+++ b/salt/top.sls
@@ -56,6 +56,9 @@ base:
     {%- if OSQUERY != 0 %}
     - mysql
     {%- endif %}
+    {%- if WAZUH != 0 %}
+    - wazuh
+    {%- endif %}
     - elasticsearch
     - logstash
     - kibana
@@ -69,9 +72,6 @@ base:
     - redis
     - launcher
     {%- endif %}
-    {%- if WAZUH != 0 %}
-    - wazuh
-    {%- endif %}
     - utility
     - schedule
     - soctopus
@@ -103,13 +103,13 @@ base:
     {%- if OSQUERY != 0 %}
     - mysql
     {%- endif %}
+    {%- if WAZUH != 0 %}
+    - wazuh
+    {%- endif %}
     - elasticsearch
     - logstash
     - kibana
     - elastalert
-    {%- if WAZUH != 0 %}
-    - wazuh
-    {%- endif %}
     - filebeat
     - utility
     - schedule
@@ -171,12 +171,12 @@ base:
     - ssl
     - common
     - firewall
-    - logstash
-    - elasticsearch
-    - curator
     {%- if WAZUH != 0 %}
     - wazuh
     {%- endif %}
+    - logstash
+    - elasticsearch
+    - curator
     - filebeat
     {%- if OSQUERY != 0 %}
     - launcher
@@ -209,14 +209,14 @@ base:
     {%- if OSQUERY != 0 %}
     - mysql
     {%- endif %}
+    {%- if WAZUH != 0 %}
+    - wazuh
+    {%- endif %}
     - logstash
     - elasticsearch
     - curator
     - kibana
     - elastalert
-    {%- if WAZUH != 0 %}
-    - wazuh
-    {%- endif %}
     - filebeat
     - utility
     - schedule
@@ -244,12 +244,12 @@ base:
     - common
     - firewall
     - redis
-    - logstash
-    - elasticsearch
-    - curator
     {%- if WAZUH != 0 %}
     - wazuh
     {%- endif %}
+    - logstash
+    - elasticsearch
+    - curator
     - filebeat
     {%- if OSQUERY != 0 %}
     - launcher