diff --git a/salt/elasticsearch/templates/so/so-snyk-template.json.jinja b/salt/elasticsearch/templates/so/so-snyk-template.json.jinja
index 616607f52..0c2d291cc 100644
--- a/salt/elasticsearch/templates/so/so-snyk-template.json.jinja
+++ b/salt/elasticsearch/templates/so/so-snyk-template.json.jinja
@@ -1,8 +1,8 @@
-{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:shards', 1) %}
+{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-snyk:shards', 1) %}
 {%- set REPLICAS = salt['pillar.get']('elasticsearch:replicas', 0) %}
-{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-zeek:refresh', '30s') %}
+{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-snyk:refresh', '30s') %}
 {
-  "index_patterns": ["so-zeek-*"],
+  "index_patterns": ["so-snyk-*"],
   "version":50001,
   "order":11,
   "settings":{
diff --git a/salt/elasticsearch/templates/so/so-sophos-template.json.jinja b/salt/elasticsearch/templates/so/so-sophos-template.json.jinja
index 616607f52..689e19999 100644
--- a/salt/elasticsearch/templates/so/so-sophos-template.json.jinja
+++ b/salt/elasticsearch/templates/so/so-sophos-template.json.jinja
@@ -1,8 +1,8 @@
-{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:shards', 1) %}
+{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-sophos:shards', 1) %}
 {%- set REPLICAS = salt['pillar.get']('elasticsearch:replicas', 0) %}
-{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-zeek:refresh', '30s') %}
+{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-sophos:refresh', '30s') %}
 {
-  "index_patterns": ["so-zeek-*"],
+  "index_patterns": ["so-sophos-*"],
   "version":50001,
   "order":11,
   "settings":{
diff --git a/salt/elasticsearch/templates/so/so-squid-template.json.jinja b/salt/elasticsearch/templates/so/so-squid-template.json.jinja
index 616607f52..9398b8a99 100644
--- a/salt/elasticsearch/templates/so/so-squid-template.json.jinja
+++ b/salt/elasticsearch/templates/so/so-squid-template.json.jinja
@@ -1,8 +1,8 @@
-{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:shards', 1) %}
+{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-squid:shards', 1) %}
 {%- set REPLICAS = salt['pillar.get']('elasticsearch:replicas', 0) %}
-{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-zeek:refresh', '30s') %}
+{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-squid:refresh', '30s') %}
 {
-  "index_patterns": ["so-zeek-*"],
+  "index_patterns": ["so-squid-*"],
   "version":50001,
   "order":11,
   "settings":{