From 7bb9b6efa9bb56f60736f8c9cca0fc3cf8d3af86 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 4 Jan 2022 10:27:45 -0500
Subject: [PATCH] populate mine with network.ip_addrs pillar.host.mainint for
 each host prior to highstate

---
 salt/common/tools/sbin/soup | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/common/tools/sbin/soup b/salt/common/tools/sbin/soup
index 9d523715a..de7614561 100755
--- a/salt/common/tools/sbin/soup
+++ b/salt/common/tools/sbin/soup
@@ -662,6 +662,8 @@ up_to_2.3.90() {
 
 up_to_2.3.100() {
   echo "Updating to Security Onion to 2.3.100"
+  echo "Populating the mine with network.ip_addrs pillar.host.mainint for each host."
+  salt \* cmd.run cmd='MAININT=$(salt-call pillar.get host:mainint --out=newline_values_only) && salt-call mine.send name=network.ip_addrs interface="$MAININT"'
   fix_wazuh
 }