diff --git a/salt/logstash/enabled.sls b/salt/logstash/enabled.sls
index 6031ad529..595297510 100644
--- a/salt/logstash/enabled.sls
+++ b/salt/logstash/enabled.sls
@@ -60,7 +60,7 @@ so-logstash:
       {% endif %}
       {% if GLOBALS.role in ['so-manager', 'so-managersearch', 'so-standalone', 'so-import', 'so-eval','so-fleet', 'so-heavynode', 'so-receiver'] %}
       - /etc/pki/elasticfleet-logstash.crt:/usr/share/logstash/elasticfleet-logstash.crt:ro
-      - /etc/pki/elasticfleet-logstash.p8:/usr/share/logstash/elasticfleet-logstash.key:ro
+      - /etc/pki/elasticfleet-logstash.key:/usr/share/logstash/elasticfleet-logstash.key:ro
       - /etc/pki/elasticfleet-lumberjack.crt:/usr/share/logstash/elasticfleet-lumberjack.crt:ro
       - /etc/pki/elasticfleet-lumberjack.p8:/usr/share/logstash/elasticfleet-lumberjack.key:ro
       {% endif %}
diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index 9b83892cb..496c05b42 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -234,7 +234,7 @@ chownelasticfleetlogstashcrt:
     - replace: False
     - name: /etc/pki/elasticfleet-logstash.crt
     - mode: 640
-    - user: 947
+    - user: 931
     - group: 939
 
 chownelasticfleetlogstashkey:
@@ -242,7 +242,7 @@ chownelasticfleetlogstashkey:
     - replace: False
     - name: /etc/pki/elasticfleet-logstash.key
     - mode: 640
-    - user: 947
+    - user: 931
     - group: 939
 # End -- Elastic Fleet Logstash Input Cert
 {% endif %} # endif is for not including HeavyNodes & Receivers