From d0dff9572d955fc71cfac3853a23e94f634f4942 Mon Sep 17 00:00:00 2001
From: Doug Burks <doug.burks@securityonionsolutions.com>
Date: Fri, 31 Mar 2023 09:22:15 -0400
Subject: [PATCH] Update auditor.json

---
 salt/elasticsearch/roles/auditor.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/elasticsearch/roles/auditor.json b/salt/elasticsearch/roles/auditor.json
index 26df1207c..6669bd2f2 100644
--- a/salt/elasticsearch/roles/auditor.json
+++ b/salt/elasticsearch/roles/auditor.json
@@ -16,6 +16,7 @@
   "indices": [
     {
       "names": [
+        "logs-*",
         "so-*"
       ],
       "privileges": [
@@ -56,4 +57,4 @@
     }
   ],  
   "run_as": []
-}
\ No newline at end of file
+}