diff --git a/contentctl/output/conf_writer.py b/contentctl/output/conf_writer.py
index 5f66e032..2c8e82f7 100644
--- a/contentctl/output/conf_writer.py
+++ b/contentctl/output/conf_writer.py
@@ -34,7 +34,7 @@ def escapeNewlines(obj:Any):
         # Failing to do so will result in an improperly formatted conf files that
         # cannot be parsed
         if isinstance(obj,str):
-            return obj.replace(f"\n","\\\n")
+            return obj.replace(f"\n"," \\\n")
         else:
             return obj
 
diff --git a/contentctl/output/templates/es_investigations_investigations.j2 b/contentctl/output/templates/es_investigations_investigations.j2
index 39c548b9..6f948338 100644
--- a/contentctl/output/templates/es_investigations_investigations.j2
+++ b/contentctl/output/templates/es_investigations_investigations.j2
@@ -7,14 +7,14 @@ disabled = 0
 tokens = {\
 {% for token in response_task.inputs %}
 {% if token == 'user' %}
-  "user": {\
-    "valuePrefix": "\"",\
-    "valueSuffix": "\"",\
-    "delimiter": " OR {{ token }}=",\
-    "valueType": "primitive",\
-    "value": "identity",\
-    "default": "null"\
-    }\{% elif token == 'dest'%}
+    "user": {\
+      "valuePrefix": "\"",\
+      "valueSuffix": "\"",\
+      "delimiter": " OR {{ token }}=",\
+      "valueType": "primitive",\
+      "value": "identity",\
+      "default": "null"\
+    }{% elif token == 'dest'%}
     "dest": {\
       "valuePrefix": "\"",\
       "valueSuffix": "\"",\
@@ -22,7 +22,7 @@ tokens = {\
       "valueType": "primitive",\
       "value": "asset",\
       "default": "null"\
-    }\{% else %}
+    }{% else %}
     "{{ token }}": {\
       "valuePrefix": "\"",\
       "valueSuffix": "\"",\
@@ -30,9 +30,9 @@ tokens = {\
       "valueType": "primitive",\
       "value": "file",\
       "default": "null"\
-    }\{% endif %}{{ "," if not loop.last }}
+    }{% endif %}{{ "," if not loop.last }}\
 {% endfor %}
-  }\
+}\
 
 
 {% endfor %}
\ No newline at end of file