From 799cf322654671e610825b978cff30b4715ec55b Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 5 Feb 2020 14:45:07 -0500
Subject: [PATCH] fix logstash for so-helix role

---
 .../conf/pipelines/helix/{ => templates}/9997_output_helix.conf | 0
 salt/logstash/etc/logstash.yml                                  | 2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename salt/logstash/conf/pipelines/helix/{ => templates}/9997_output_helix.conf (100%)

diff --git a/salt/logstash/conf/pipelines/helix/9997_output_helix.conf b/salt/logstash/conf/pipelines/helix/templates/9997_output_helix.conf
similarity index 100%
rename from salt/logstash/conf/pipelines/helix/9997_output_helix.conf
rename to salt/logstash/conf/pipelines/helix/templates/9997_output_helix.conf
diff --git a/salt/logstash/etc/logstash.yml b/salt/logstash/etc/logstash.yml
index 47b487ebe..d7a51df81 100644
--- a/salt/logstash/etc/logstash.yml
+++ b/salt/logstash/etc/logstash.yml
@@ -63,7 +63,7 @@
 #
 # path.config:
 # /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image
-{%- if grains.role != 'so-mastersearch' and grains.role != 'so-heavynode' and grains.role != 'so-master' and grains.role != 'so-eval' %}
+{%- if grains.role != 'so-mastersearch' and grains.role != 'so-heavynode' and grains.role != 'so-master' and grains.role != 'so-eval' and grains.role != 'so-helix' %}
 path.config: /usr/share/logstash/pipeline.enabled/*.conf
 {%- else %} 
 #path.config: /usr/share/logstash/pipeline.enabled/*.conf