diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml
index 3fe1bf123..52ca5fe8c 100644
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -119,7 +119,7 @@ soc:
         - identity_id
         - http_request.headers.user-agent
         - msg
-      ':kratos:':
+      ':hydra:':
         - soc_timestamp
         - event.dataset
         - http_request.headers.x-real-ip