diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml
index d19f7ed40..15f1fd8ce 100644
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -2020,7 +2020,6 @@ soc:
               - event_data.destination.port
               - event_data.process.executable
               - event_data.process.pid
-              - rule.uuid
             ':sigma:':
               - soc_timestamp
               - event.dataset
@@ -2034,7 +2033,6 @@ soc:
               - event_data.destination.port
               - event_data.process.executable
               - event_data.process.pid
-              - rule.uuid
             ':strelka:':
               - soc_timestamp
               - event.dataset
@@ -2044,7 +2042,6 @@ soc:
               - file.source
               - file.mime_type
               - log.id.fuid
-              - rule.uuid
           queryBaseFilter: tags:alert
           queryToggleFilters:
             - name: acknowledged