From 442f7a914ae7ca710535729f85983bc75a609492 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Wed, 18 Sep 2024 14:16:43 -0400
Subject: [PATCH] add missing annotation file

---
 salt/elasticagent/soc_elasticagent.yaml | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 salt/elasticagent/soc_elasticagent.yaml

diff --git a/salt/elasticagent/soc_elasticagent.yaml b/salt/elasticagent/soc_elasticagent.yaml
new file mode 100644
index 000000000..a24ac1985
--- /dev/null
+++ b/salt/elasticagent/soc_elasticagent.yaml
@@ -0,0 +1,4 @@
+elasticagent:
+  enabled:
+    description: Enables or disables the Elastic Agent process. This process must remain enabled to allow collection of node events.
+    advanced: True