diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml
index 13e50a0cb..f59d6117b 100644
--- a/salt/soc/soc_soc.yaml
+++ b/salt/soc/soc_soc.yaml
@@ -59,7 +59,13 @@ soc:
         description: Event fields mappings are defined by the format ":event.module:event.dataset". For example, to customize which fields show for 'syslog' events originating from 'zeek', find the eventField item in the left panel that looks like ':zeek:syslog'. The 'default' entry is used for all events that do not match an existing mapping defined in the list to the left.
         global: True
         advanced: True
+      ':endpoint:endpoint_x_events_x_api': *eventFields
+      ':endpoint:endpoint_x_events_x_file': *eventFields
+      ':endpoint:endpoint_x_events_x_library': *eventFields
+      ':endpoint:endpoint_x_events_x_network': *eventFields
       ':endpoint:endpoint_x_events_x_process': *eventFields
+      ':endpoint:endpoint_x_events_x_registry': *eventFields
+      ':endpoint:endpoint_x_events_x_security': *eventFields
     server:
       srvKey:
         description: Unique key for protecting the integrity of user submitted data via the web browser.