diff --git a/salt/logstash/init.sls b/salt/logstash/init.sls
index dbf345822..60e0967c3 100644
--- a/salt/logstash/init.sls
+++ b/salt/logstash/init.sls
@@ -38,6 +38,9 @@
 {% set PIPELINES = salt['pillar.get']('logstash:pipelines', {}) %}
 {% set DOCKER_OPTIONS = salt['pillar.get']('logstash:docker_options', {}) %}
 
+include:
+  - elasticsearch
+
 # Create the logstash group
 logstashgroup:
   group.present:
diff --git a/salt/top.sls b/salt/top.sls
index a04e75657..f95223354 100644
--- a/salt/top.sls
+++ b/salt/top.sls
@@ -138,7 +138,6 @@ base:
     {%- if WAZUH != 0 %}
     - wazuh
     {%- endif %}
-    - elasticsearch
     - logstash
     - kibana
     - elastalert
@@ -185,7 +184,6 @@ base:
     {%- if WAZUH != 0 %}
     - wazuh
     {%- endif %}
-    - elasticsearch
     - logstash
     - kibana
     - pcap
@@ -237,7 +235,6 @@ base:
     - common
     - firewall
     - logstash
-    - elasticsearch
     - curator
     {%- if FLEETMANAGER or FLEETNODE %}
     - fleet.install_package
@@ -265,7 +262,6 @@ base:
     - wazuh
     {%- endif %}
     - logstash
-    - elasticsearch
     - curator
     - filebeat
     {%- if FLEETMANAGER or FLEETNODE %}
@@ -309,7 +305,6 @@ base:
     - wazuh
     {%- endif %}
     - logstash
-    - elasticsearch
     - curator
     - kibana
     - elastalert
@@ -345,7 +340,6 @@ base:
     - wazuh
     {%- endif %}
     - logstash
-    - elasticsearch
     - curator
     - filebeat
     {%- if FLEETMANAGER or FLEETNODE %}