diff --git a/salt/soc/merged.map.jinja b/salt/soc/merged.map.jinja index 4c301fa9d..1d9946a05 100644 --- a/salt/soc/merged.map.jinja +++ b/salt/soc/merged.map.jinja @@ -70,7 +70,7 @@ {# Define the Detections custom ruleset that should always be present #} {% set CUSTOM_RULESET = { - 'name': 'custom', + 'name': '__custom__', 'description': 'User-created custom rules created via the Detections module in the SOC UI', 'sourceType': 'elasticsearch', 'sourcePath': 'so_detection.ruleset:__custom__',