From f6b71e39415c0722f22157d590a11757cb9a0d3a Mon Sep 17 00:00:00 2001
From: TOoSmOotH <mike.reeves@securityonionsolutions.com>
Date: Wed, 3 Jun 2020 21:20:58 -0400
Subject: [PATCH] Fix top so zeek doest run when disabled

---
 salt/top.sls | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/salt/top.sls b/salt/top.sls
index 52beeeae9..6d73ccfc8 100644
--- a/salt/top.sls
+++ b/salt/top.sls
@@ -86,7 +86,9 @@ base:
     - kibana
     - pcap
     - suricata
+    {%- if BROVER != 'SURICATA' %}
     - zeek
+    {- endif %}
     {%- if STRELKA %}
     - strelka
     {%- endif %}
@@ -194,7 +196,9 @@ base:
     - kibana
     - pcap
     - suricata
+    {%- if BROVER != 'SURICATA' %}
     - zeek
+    {%- endif %}
     {%- if STRELKA %}
     - strelka
     {%- endif %}