Merge pull request #12948 from Security-Onion-Solutions/fix/strelka_yara_watch

Restart Strelka backend when YARA rules change

salt/strelka/backend/enabled.sls

@@ -42,8 +42,8 @@ strelka_backend:
       {% endfor %}
     {% endif %}
     - restart_policy: on-failure
-    #- watch:
-      #- file: strelkarules
+    - watch:
+      - file: /opt/so/conf/strelka/rules/compiled/rules.compiled
 
 delete_so-strelka-backend_so-status.disabled:
   file.uncomment: