From 999f83ce57cac79bb8b4a0dbb4daed4cfd83c6c1 Mon Sep 17 00:00:00 2001
From: DefensiveDepth <josh@defensivedepth.com>
Date: Mon, 1 Dec 2025 14:21:58 -0500
Subject: [PATCH] Create dir earlier

---
 salt/suricata/config.sls | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/salt/suricata/config.sls b/salt/suricata/config.sls
index 7ce605e0b..59ae376dc 100644
--- a/salt/suricata/config.sls
+++ b/salt/suricata/config.sls
@@ -22,6 +22,14 @@ suriPCAPbpfcompilationfailure:
 {%     endif %}
 {%   endif %}
 
+suridir:
+  file.directory:
+    - name: /opt/so/conf/suricata
+    - user: 940
+    - group: 939
+    - mode: 775
+    - makedirs: True
+
 # BPF applied to all of Suricata - alerts/metadata/pcap
 suribpf:
   file.managed:
@@ -81,13 +89,6 @@ suricata_sbin_jinja:
     - file_mode: 755
     - template: jinja
 
-suridir:
-  file.directory:
-    - name: /opt/so/conf/suricata
-    - user: 940
-    - group: 939
-    - mode: 775
-
 suriruledir:
   file.directory:
     - name: /opt/so/rules/suricata