diff --git a/salt/filebeat/defaults.yaml b/salt/filebeat/defaults.yaml
index 31ed8e0b0..83bb9b22e 100644
--- a/salt/filebeat/defaults.yaml
+++ b/salt/filebeat/defaults.yaml
@@ -27,6 +27,7 @@ filebeat:
     - smtp
     - snmp
     - socks
+    - software
     - ssh
     - ssl
     - tunnel