diff --git a/salt/telegraf/scripts/zeekcaptureloss.sh b/salt/telegraf/scripts/zeekcaptureloss.sh
index e11b2a0eb..a6f9f3531 100644
--- a/salt/telegraf/scripts/zeekcaptureloss.sh
+++ b/salt/telegraf/scripts/zeekcaptureloss.sh
@@ -2,7 +2,7 @@
 # This script returns the average of all the workers average capture loss to telegraf / influxdb in influx format include nanosecond precision timestamp
 {%- set WORKERS = salt['pillar.get']('sensor:zeek_lbprocs', salt['pillar.get']('sensor:zeek_pins') | length) %}
 ZEEKLOG=/host/nsm/zeek/spool/logger/capture_loss.log
-LASTCAPTURELOSSLOG=/host/opt/so/log/telegraf_lastcaptureloss.txt
+LASTCAPTURELOSSLOG=/var/log/telegraf/lastcaptureloss.txt
 if [ -f "$ZEEKLOG" ]; then
   CURRENTTS=$(tail -1 $ZEEKLOG | jq .ts | sed 's/"//g')
   if [ -f "$LASTCAPTURELOSSLOG" ]; then
@@ -12,5 +12,5 @@ if [ -f "$ZEEKLOG" ]; then
       echo "zeekcaptureloss loss=$LOSS"
     fi
   fi
-  echo "$CURRENTS" > $LASTCAPTURELOSSLOG
+  echo "$CURRENTTS" > $LASTCAPTURELOSSLOG
 fi
\ No newline at end of file