securityonion/salt/elasticsearch/templates/component/elastic-agent/logs@custom.json

{
  "template": {
    "settings": {
      "index": {
        "number_of_replicas": "0"
      }
    }
  }
}