diff --git a/salt/filebeat/etc/filebeat.yml b/salt/filebeat/etc/filebeat.yml
index 00146d5d1..10f80beea 100644
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -147,7 +147,7 @@ filebeat.inputs:
   processors:
     {%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
   - add_tags:
-    tags: ["ics"]
+      tags: ["ics"]
     {%- endif %}
   - drop_fields:
       fields: ["source", "prospector", "input", "offset", "beat"]
@@ -168,7 +168,7 @@ filebeat.inputs:
   processors:
     {%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
   - add_tags:
-    tags: ["ics"]
+      tags: ["ics"]
     {%- endif %}
   - add_tags:
       tags: ["import"]