Merge pull request #12948 from Security-Onion-Solutions/fix/strelka_y…

…ara_watch Restart Strelka backend when YARA rules change
Security-Onion-Solutions · May 6, 2024 · a25e43d · a25e43d
2 parents b997e44 + 1e48955
commit a25e43d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/salt/strelka/backend/enabled.sls b/salt/strelka/backend/enabled.sls
@@ -42,8 +42,8 @@ strelka_backend:
       {% endfor %}
     {% endif %}
     - restart_policy: on-failure
-    #- watch:
-      #- file: strelkarules
+    - watch:
+      - file: /opt/so/conf/strelka/rules/compiled/rules.compiled
 
 delete_so-strelka-backend_so-status.disabled:
   file.uncomment: