diff --git a/salt/top.sls b/salt/top.sls
index 456e09420..011655bde 100644
--- a/salt/top.sls
+++ b/salt/top.sls
@@ -6,6 +6,7 @@
 {%- set DOMAINSTATS = salt['pillar.get']('master:domainstats', '0') -%}
 {%- set FLEETMASTER = salt['pillar.get']('static:fleet_master', False) -%}
 {%- set FLEETNODE = salt['pillar.get']('static:fleet_node', False) -%}
+{%- set STRELKA = salt['pillar.get']('master:strelka', '1') -%
 
 
 base:
@@ -63,11 +64,14 @@ base:
     - wazuh
     {%- endif %}
     - elasticsearch
-    - filebeat
     - kibana
     - pcap
     - suricata
     - zeek
+    {%- if STRELKA %}
+    - strelka
+    {%- endif %}
+    - filebeat
     - curator
     - elastalert
     {%- if FLEETMASTER or FLEETNODE %}