From 807b40019fc098ea8c0c8d70355e1086dd3dbebc Mon Sep 17 00:00:00 2001
From: Josh Patterson <josh.patterson@securityonionsolutions.com>
Date: Wed, 25 Oct 2023 16:16:48 -0400
Subject: [PATCH] Update soc_elasticsearch.yaml

---
 salt/elasticsearch/soc_elasticsearch.yaml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/salt/elasticsearch/soc_elasticsearch.yaml b/salt/elasticsearch/soc_elasticsearch.yaml
index fde8d234f..d456dcbfc 100644
--- a/salt/elasticsearch/soc_elasticsearch.yaml
+++ b/salt/elasticsearch/soc_elasticsearch.yaml
@@ -458,13 +458,14 @@ elasticsearch:
     so-zeek: *indexSettings
   so_roles:
     so-maanger: &soroleSettings
-      node:
-        roles:
-          description: List of Elasticsearch roles that the node should have. Blank assumes all roles
-          forcedType: "[]string"
-          global: False
-          advanced: True
-          helpLink: elasticsearch.html
+      config:
+        node:
+          roles:
+            description: List of Elasticsearch roles that the node should have. Blank assumes all roles
+            forcedType: "[]string"
+            global: False
+            advanced: True
+            helpLink: elasticsearch.html
     so-managersearch: *soroleSettings
     so-standalone: *soroleSettings
     so-searchnode: *soroleSettings