diff --git a/salt/logstash/etc/logstash-template.json b/salt/logstash/etc/logstash-template.json
index 53c418d39..44e519842 100644
--- a/salt/logstash/etc/logstash-template.json
+++ b/salt/logstash/etc/logstash-template.json
@@ -2675,6 +2675,14 @@
         "rule_number":{
           "type":"long"
         },
+	"rule_signature":{
+          "type":"text",
+          "fields":{
+            "keyword":{
+              "type":"keyword"
+            }
+          }
+        },
         "rule_type":{
           "type":"text",
           "fields":{