diff --git a/salt/common/tools/sbin/so-zeek-logs b/salt/common/tools/sbin/so-zeek-logs
index fa9d9c878..0d84040e9 100755
--- a/salt/common/tools/sbin/so-zeek-logs
+++ b/salt/common/tools/sbin/so-zeek-logs
@@ -35,6 +35,7 @@ whiptail_manager_adv_service_zeeklogs() {
   "smb_mapping" "" ON \
   "smtp" "" ON \
   "snmp" "" ON \
+  "software" "" ON \
   "ssh" "" ON \
   "ssl" "" ON \
   "syslog" "" ON \