From d2069dc5f2039108b6ba7fe8336e59e671e2d6a2 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 14 Jun 2021 09:58:50 -0400
Subject: [PATCH] update roles that include es state

---
 salt/filebeat/init.sls | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/filebeat/init.sls b/salt/filebeat/init.sls
index f2a86cd5a..0b59fded2 100644
--- a/salt/filebeat/init.sls
+++ b/salt/filebeat/init.sls
@@ -22,7 +22,7 @@
 {% set MANAGERIP = salt['pillar.get']('global:managerip', '') %}
 {% from 'filebeat/map.jinja' import THIRDPARTY with context %}
 {% from 'filebeat/map.jinja' import SO with context %}
-{% set ES_INCLUDED_NODES = ['so-standalone'] %}
+{% set ES_INCLUDED_NODES = ['so-standalone', 'so-managersearch', 'so-node', 'so-import'] %}
 
 #only include elastic state for certain nodes
 {% if grains.role in ES_INCLUDED_NODES %}