diff --git a/scenarios/examples/elkstack_7.xml b/scenarios/examples/elkstack_7.xml
index f2490efa3..008254448 100644
--- a/scenarios/examples/elkstack_7.xml
+++ b/scenarios/examples/elkstack_7.xml
@@ -69,27 +69,25 @@
 			</input>
 		</service>
 
-<!--		<utility module_path=".*/filebeat.*">-->
-<!--			<input into="logstash_ip">-->
-<!--				<datastore access="0">IP_address</datastore>-->
-<!--			</input>-->
-<!--			<input into="logstash_port">-->
-<!--				<datastore access="0">logstash_port</datastore>-->
-<!--			</input>-->
-<!--		</utility>-->
+		<utility module_path=".*/filebeat.*">
+			<input into="logstash_ip">
+				<datastore access="0">IP_addresses</datastore>
+			</input>
+			<input into="logstash_port">
+				<datastore access="0">logstash_port</datastore>
+			</input>
+		</utility>
 
-<!--		<utility module_path=".*/auditbeat.*">-->
-<!--			<input into="logstash_ip">-->
-<!--				<datastore access="0">IP_address</datastore>-->
-<!--			</input>-->
-<!--			<input into="logstash_port">-->
-<!--				<datastore access="0">logstash_port</datastore>-->
-<!--			</input>-->
-<!--		</utility>-->
+		<utility module_path=".*/auditbeat.*">
+			<input into="logstash_ip">
+				<datastore access="0">IP_addresses</datastore>
+			</input>
+			<input into="logstash_port">
+				<datastore access="0">logstash_port</datastore>
+			</input>
+		</utility>
 
-<!--		<utility module_path=".*/elastalert.*">-->
-
-<!--		</utility>-->
+<!--	TODO: Update this to use latest elastalert version	<utility module_path=".*/elastalert.*"/>-->
 
 		<network type="private_network" >
 			<input into="IP_address">