diff --git a/manifests/module/logstash.pp b/manifests/module/logstash.pp
new file mode 100644
index 0000000..97beec4
--- /dev/null
+++ b/manifests/module/logstash.pp
@@ -0,0 +1,45 @@
+# filebeat::module::logstash
+#
+# @summary
+#   This class manages the Filebeat Logstash module.
+#
+# @example
+#   class { 'filebeat::module::logstash':
+#     log_enabled     => true,
+#     log_paths       => ['/var/log/logstash/logstash-plain.log'],
+#     slowlog_enabled => true,
+#     slowlog_paths   => ['/var/log/logstash/logstash-slowlog.log'],
+#   }
+#
+# @param log_enabled
+#   Whether to enable the Logstash module.
+# @param log_paths
+#   An array of paths to the Logstash logs.
+# @param slowlog_enabled
+#   Whether to enable the Logstash slowlog module.
+# @param slowlog_paths
+#   An array of paths to the Logstash slowlogs.
+#
+class filebeat::module::logstash (
+  Boolean $log_enabled = false,
+  Optional[Array[Stdlib::Absolutepath]] $log_paths = undef,
+  Boolean $slowlog_enabled = false,
+  Optional[Array[Stdlib::Absolutepath]] $slowlog_paths = undef,
+) {
+  filebeat::module { 'logstash':
+    config => {
+      'log'     => delete_undef_values(
+        {
+          'enabled'   => $log_enabled,
+          'var.paths' => $log_paths,
+        }
+      ),
+      'slowlog' => delete_undef_values(
+        {
+          'enabled'   => $slowlog_enabled,
+          'var.paths' => $slowlog_paths,
+        }
+      ),
+    },
+  }
+}
diff --git a/spec/classes/module/logstash_spec.rb b/spec/classes/module/logstash_spec.rb
new file mode 100644
index 0000000..2200d64
--- /dev/null
+++ b/spec/classes/module/logstash_spec.rb
@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe 'filebeat::module::logstash' do
+  let :pre_condition do
+    'include ::filebeat'
+  end
+
+  let(:facts) { 
+    {
+      :kernel => 'Linux',
+      :os => {
+        :family => 'Debian',
+        :name => 'Ubuntu',
+      }
+    } 
+  }
+  
+  context 'on default values' do
+    it { is_expected.to compile.with_all_deps }
+
+    it {
+      is_expected.to contain_file('filebeat-module-logstash').with_content(
+      %r{- module: logstash\n\s{2}log:\n\s{4}enabled: false\n\s{2}slowlog:\n\s{4}enabled: false\n\n},
+    )}
+  end
+
+  context 'on log and slowlog enabled with paths' do
+    let(:params) do
+      {
+        'log_enabled' => true,
+        'log_paths' => ['/var/log/logstash.log'],
+        'slowlog_enabled' => true,
+        'slowlog_paths' => ['/var/log/logstash-slowlog.log'],
+      }
+    end
+
+    it { is_expected.to compile.with_all_deps }
+
+    it {
+      is_expected.to contain_file('filebeat-module-logstash').with_content(
+        <<-EOS
+### Filebeat configuration managed by Puppet ###
+---
+- module: logstash
+  log:
+    enabled: true
+    var.paths:
+    - "/var/log/logstash.log"
+  slowlog:
+    enabled: true
+    var.paths:
+    - "/var/log/logstash-slowlog.log"
+
+EOS
+    )
+    }
+  end
+end