diff --git a/CHANGELOG.md b/CHANGELOG.md
index 803fe3ee..2321c6b8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,6 +38,7 @@ The **patch** part changes incrementally at each release.
 ### Fixed
 
 * bind9: added log files to apparmor definition so bind can run
+* filebeat: fix Ansible syntax error
 * nagios-nrpe: libfcgi-client-perl is not available before Debian 10
 * redis: socket/pid directories have the correct permissions
 
diff --git a/filebeat/tasks/main.yml b/filebeat/tasks/main.yml
index a8941f86..a19848e8 100644
--- a/filebeat/tasks/main.yml
+++ b/filebeat/tasks/main.yml
@@ -40,7 +40,7 @@
   systemd:
     name: filebeat
     enabled: yes
-    notify: restart filebeat
+  notify: restart filebeat
 
 - name: is logstash-plugin available?
   stat: