From 66dc6274e693112ca23d4acfda1e2b6021eafed3 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 31 May 2023 15:59:36 -0400
Subject: [PATCH] exclude elasticsearch.ca state from fleet and receiver nodes

---
 salt/logstash/enabled.sls | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/logstash/enabled.sls b/salt/logstash/enabled.sls
index c0129c6e1..91433cba8 100644
--- a/salt/logstash/enabled.sls
+++ b/salt/logstash/enabled.sls
@@ -12,7 +12,9 @@
 {%   set lsheap = LOGSTASH_MERGED.settings.lsheap %}
 
 include:
+{%   if GLOBALS.role not in ['so-receiver','so-fleet'] %}
   - elasticsearch.ca
+{%   endif %}
   - logstash.config
   - logstash.sostatus