diff --git a/setup/so-functions b/setup/so-functions
index 689cc78aa..3ac27f26b 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -1611,6 +1611,7 @@ reserve_group_ids() {
 	logCmd "groupadd -g 932 kibana"
 	logCmd "groupadd -g 933 elastalert"
 	logCmd "groupadd -g 937 zeek"
+	logCmd "groupadd -g 938 salt"
 	logCmd "groupadd -g 939 socore"
 	logCmd "groupadd -g 940 suricata"
 	logCmd "groupadd -g 948 elastic-agent-pr"