diff --git a/salt/filebeat/etc/filebeat.yml b/salt/filebeat/etc/filebeat.yml
index 50dab6d2f..1ec78226d 100644
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -7,8 +7,8 @@
 
 {%- set HOSTNAME = salt['grains.get']('host', '') %}
 {%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %}
-{%- set WAZUHENABLED = salt['pillar.get']('static:wazuh_enabled', '1') %}
-{%- set STRELKAENABLED = salt['pillar.get']('static:strelka_enabled', '1') %}
+{%- set WAZUHENABLED = salt['pillar.get']('master:wazuh_enabled', '0') %}
+{%- set STRELKAENABLED = salt['pillar.get']('master:strelka_enabled', '0') %}
 {%- set FLEETMASTER = salt['pillar.get']('static:fleet_master', False) -%}
 {%- set FLEETNODE = salt['pillar.get']('static:fleet_node', False) -%}
 
diff --git a/salt/top.sls b/salt/top.sls
index 1dc06098e..e08ef2f9b 100644
--- a/salt/top.sls
+++ b/salt/top.sls
@@ -6,7 +6,7 @@
 {%- set DOMAINSTATS = salt['pillar.get']('master:domainstats', '0') -%}
 {%- set FLEETMASTER = salt['pillar.get']('static:fleet_master', False) -%}
 {%- set FLEETNODE = salt['pillar.get']('static:fleet_node', False) -%}
-{%- set STRELKA = salt['pillar.get']('master:strelka', '1') -%}
+{%- set STRELKA = salt['pillar.get']('master:strelka', '0') -%}
 
 
 base: