From 7ecfb55b7026e6858512de04b25c6c137c4b42c4 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 20 Oct 2021 14:50:50 -0400
Subject: [PATCH] fix pillar call

---
 salt/telegraf/etc/telegraf.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/telegraf/etc/telegraf.conf b/salt/telegraf/etc/telegraf.conf
index 71fc610b4..dac41123e 100644
--- a/salt/telegraf/etc/telegraf.conf
+++ b/salt/telegraf/etc/telegraf.conf
@@ -644,8 +644,8 @@
   url = "http://localhost:9600"
   collect = ["pipelines"]
   {% if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %}
-  username = "{{ salt['pillar.get']('elasticsearch:auth:so_logstash_user:user') }}"
-  password = "{{ salt['pillar.get']('elasticsearch:auth:so_logstash_user:pass') }}"
+  username = "{{ salt['pillar.get']('elasticsearch:auth:users:so_logstash_user:user') }}"
+  password = "{{ salt['pillar.get']('elasticsearch:auth:users:so_logstash_user:pass') }}"
   {% endif %}
 {%- endif %}