diff --git a/salt/filebeat/etc/filebeat.yml b/salt/filebeat/etc/filebeat.yml
index 43bfcfe30..7d8633cbe 100644
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -146,7 +146,7 @@ filebeat.inputs:
   processors:
     {%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
   - add_tags:
-    tags: ["ics"]
+      tags: ["ics"]
     {%- endif %}
   - drop_fields:
       fields: ["source", "prospector", "input", "offset", "beat"]
@@ -167,7 +167,7 @@ filebeat.inputs:
   processors:
     {%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
   - add_tags:
-    tags: ["ics"]
+      tags: ["ics"]
     {%- endif %}
   - add_tags:
       tags: ["import"]