diff --git a/site-modules/profile/manifests/logstash.pp b/site-modules/profile/manifests/logstash.pp
--- a/site-modules/profile/manifests/logstash.pp
+++ b/site-modules/profile/manifests/logstash.pp
@@ -18,7 +18,13 @@
   }
 
   package { 'logstash':
-    ensure => '1:6.3.2-1',
+    ensure => '1:6.4.2-1',
+  }
+
+  apt::pin { 'logstash':
+    packages => 'logstash',
+    version  => '1:6.4.2-1',
+    priority => 1001,
   }
 
   file { '/etc/logstash/conf.d/input.conf':