From d6cb8ab92823b95d0d35cee157549b52a91d2c97 Mon Sep 17 00:00:00 2001
From: Doug Burks <doug.burks@securityonionsolutions.com>
Date: Fri, 23 Feb 2024 17:09:40 -0500
Subject: [PATCH] update events_x_process in defaults.yaml

---
 salt/soc/defaults.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml
index d672d1dad..7204027fc 100644
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -995,7 +995,7 @@ soc:
         -  tds.header_type
         -  log.id.uid
         -  event.dataset
-      ':endpoint:endpoint_x_events_x_process':
+      ':endpoint:events_x_process':
         -  soc_timestamp
         -  event.dataset
         -  host.name