From ff1a903895b64ad60381e15115e9c3840629bf03 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 2 Nov 2022 12:58:31 -0400
Subject: [PATCH] Update init.sls

---
 salt/strelka/init.sls | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/salt/strelka/init.sls b/salt/strelka/init.sls
index ff4727126..a9f9c14cb 100644
--- a/salt/strelka/init.sls
+++ b/salt/strelka/init.sls
@@ -24,6 +24,20 @@
 {% import_yaml 'strelka/defaults.yaml' as strelka_config with context %}
 {% set IGNORELIST = salt['pillar.get']('strelka:ignore', strelka_config.strelka.ignore, merge=True, merge_nested_lists=True) %}
 
+{% if grains['os'] != 'CentOS' %}     
+strelkapkgs:
+  pkg.installed:
+    - skip_suggestions: True
+    - pkgs:
+      - python3-watchdog
+{% else %}
+commonpkgs:
+  pkg.installed:
+    - skip_suggestions: True
+    - pkgs:
+      - securityonion-python36-watchdog
+{% endif %}
+    
 # Strelka config
 strelkaconfdir:
   file.directory: