diff --git a/x-pack/legacy/plugins/siem/server/lib/detection_engine/scripts/post_x_signals.sh b/x-pack/legacy/plugins/siem/server/lib/detection_engine/scripts/post_x_signals.sh
index 5762453a0b1cf0..326d47280c3061 100755
--- a/x-pack/legacy/plugins/siem/server/lib/detection_engine/scripts/post_x_signals.sh
+++ b/x-pack/legacy/plugins/siem/server/lib/detection_engine/scripts/post_x_signals.sh
@@ -31,7 +31,7 @@ do {
     \"type\": \"query\",
     \"from\": \"now-6m\",
     \"to\": \"now\",
-    \"query\": \"user.name: root or user.name: admin\"
+    \"query\": \"user.name: root or user.name: admin\",
     \"language\": \"kuery\"
   }" \
   | jq .;