From a663bf63c61a5f51c53b7116a067a3fa94bc03de Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 29 Apr 2024 14:22:04 -0400
Subject: [PATCH] set Suricata as default pcap engine for eval

---
 setup/so-functions | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/setup/so-functions b/setup/so-functions
index e49d0dbea..60908e0d4 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -1330,6 +1330,10 @@ create_global() {
 	echo "  influxdb_host: '$HOSTNAME'" >> $global_pillar_file
 	echo "  registry_host: '$HOSTNAME'" >> $global_pillar_file
 	echo "  endgamehost: '$ENDGAMEHOST'" >> $global_pillar_file
+
+	if [ "$install_type" = 'EVAL' ]; then
+		echo "  pcapengine: SURICATA" >> $global_pillar_file
+	fi
 }
 
 create_sensoroni_pillar() {