diff --git a/salt/soc/merged.map.jinja b/salt/soc/merged.map.jinja index 4cd08a218..ae68dc01f 100644 --- a/salt/soc/merged.map.jinja +++ b/salt/soc/merged.map.jinja @@ -32,7 +32,7 @@ {# do not automatically enable Sigma rules if install is Eval or Import #} {% if grains['role'] in ['so-eval', 'so-import'] %} - {% do SOCMERGED.config.server.modules.elastalertengine.update({'autoEnabledSigmaRules': ""}) %} + {% do SOCMERGED.config.server.modules.elastalertengine.update({'autoEnabledSigmaRules': []}) %} {% endif %} {# remove these modules if detections is disabled #}