From bb6f3107bcf2edf221a9a0de69a4fa6ef91a09fe Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Mon, 22 Feb 2021 10:29:40 -0500
Subject: [PATCH] [fix] idstools can run on an import node as well

---
 salt/common/tools/sbin/so-rules | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/common/tools/sbin/so-rules b/salt/common/tools/sbin/so-rules
index 154ecf461..a14ee0708 100644
--- a/salt/common/tools/sbin/so-rules
+++ b/salt/common/tools/sbin/so-rules
@@ -46,7 +46,7 @@ def check_apply(args: dict):
 
 def find_minion_pillar(minion_id: str) -> str:
   if minion_id == None:
-    regex = '^.*_(manager|standalone)\.sls$'
+    regex = '^.*_(manager|standalone|import)\.sls$'
   else:
     regex = f'^{minion_id}\.sls$'