diff --git a/CHANGELOG.md b/CHANGELOG.md
index ff905a42..ac78e059 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -45,6 +45,7 @@ The **patch** part changes incrementally at each release.
 * evolinux-base: install freeipmi by default on dedicated hw
 * kibana: 7.x by default
 * listupgrade: upstream release 21.06.3
+* logstash: elastic_stack_version = 7.x
 * mysql: mariadb-client-10.5 on Debian 11
 * mysql: use python3 with Debian 11 and later
 * squid: improve default whitelist (more specific patterns)
diff --git a/logstash/defaults/main.yml b/logstash/defaults/main.yml
index 456769cd..06bf376d 100644
--- a/logstash/defaults/main.yml
+++ b/logstash/defaults/main.yml
@@ -1,5 +1,5 @@
 ---
-elastic_stack_version: "6.x"
+elastic_stack_version: "7.x"
 
 logstash_jvm_xms: 256m
 logstash_jvm_xmx: 512g