diff --git a/logstash/tasks/main.yml b/logstash/tasks/main.yml
index 61c585bf..8f740424 100644
--- a/logstash/tasks/main.yml
+++ b/logstash/tasks/main.yml
@@ -59,6 +59,9 @@
   template:
     src: "{{ item }}"
     dest: /etc/logstash/conf.d/logstash.conf
+    owner: logstash
+    group: logstash
+    mode: "0640"
     force: yes
   with_first_found:
   - "templates/logstash/logstash.{{ inventory_hostname }}.conf.j2"