From ae3fe9e892ede08a1c4906134bc2bd5976a2c10b Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Mon, 31 Aug 2020 17:07:16 +0000
Subject: [PATCH] Ensure Zeek syslog log is enabled for Import node

---
 setup/so-functions | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup/so-functions b/setup/so-functions
index 64f52f304..73828b091 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -1980,7 +1980,7 @@ zeek_logs_enabled() {
 		for BLOG in "${BLOGS[@]}"; do
 			echo "    - $BLOG" | tr -d '"' >> "$zeeklogs_pillar"
 		done
-	elif [ "$install_type" == "EVAL" ]; then
+	elif [ "$install_type" == "EVAL" ]  || [ "$install_type" == "IMPORT" ]; then
 		printf '%s\n'\
                         "    - conn"\
                         "    - dce_rpc"\