diff --git a/site-modules/profile/files/logstash/logstash.yml b/site-modules/profile/files/logstash/logstash.yml
new file mode 100644
--- /dev/null
+++ b/site-modules/profile/files/logstash/logstash.yml
@@ -0,0 +1,7 @@
+#
+# File managed by puppet (profile::logstash). All modifications will be lost.
+
+path.data: /var/lib/logstash
+path.logs: /var/log/logstash
+
+pipeline.ecs_compatibility: disabled
diff --git a/site-modules/profile/manifests/logstash.pp b/site-modules/profile/manifests/logstash.pp
--- a/site-modules/profile/manifests/logstash.pp
+++ b/site-modules/profile/manifests/logstash.pp
@@ -40,6 +40,13 @@
     notify  => Service['logstash'],
   }
 
+  file { '/etc/logstash/logstash.yml':
+    ensure  => 'file',
+    source  => 'puppet:///modules/profile/logstash/logstash.yml',
+    require => Package['logstash'],
+    notify  => Service['logstash'],
+  }
+
   service { 'logstash':
     ensure  => running,
     enable  => true,