pillarize idstools - https://github.com/Security-Onion-Solutions/securityonion/issues/583

salt/idstools/etc/enable.conf

@@ -1,3 +1,5 @@
+{% set enabled_sids = salt['pillar.get']('idstools:sids:enabled', {}) -%}
+
 # idstools-rulecat - enable.conf
 
 # Example of enabling a rule by signature ID (gid is optional).
@@ -8,3 +10,7 @@
 # - All regular expression matches are case insensitive.
 # re:hearbleed
 # re:MS(0[7-9]|10)-\d+
+
+{%- for sid in enabled_sids %}
+{{ sid }}
+{% endfor -%}