From 87494f64c78cec81d5633f30b59421f511554100 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Fri, 27 Oct 2023 09:06:12 -0400
Subject: [PATCH] Annotation changes for warm node

---
 salt/elasticsearch/soc_elasticsearch.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/elasticsearch/soc_elasticsearch.yaml b/salt/elasticsearch/soc_elasticsearch.yaml
index 8bee839c1..5b4d63f40 100644
--- a/salt/elasticsearch/soc_elasticsearch.yaml
+++ b/salt/elasticsearch/soc_elasticsearch.yaml
@@ -109,7 +109,8 @@ elasticsearch:
           warm:
             min_age: 
               description: Minimum age of index. ex. 30d - This determines when the index should be moved to the cold tier.  While still searchable, this tier is typically optimized for lower storage costs rather than search speed.
-              regex: ^\[0-9\]{1-5}d$
+              regex: ^\[0-9\]{1,5}d$
+              global: True
             actions:
               set_priority:
                 priority: