diff --git a/setup/roles/logstash_writer.json b/setup/roles/logstash_writer.json
index 7cd38fc..b43861f 100644
--- a/setup/roles/logstash_writer.json
+++ b/setup/roles/logstash_writer.json
@@ -8,7 +8,8 @@
     {
       "names": [
         "logs-generic-default",
-        "logstash-*"
+        "logstash-*",
+        "ecs-logstash-*"
       ],
       "privileges": [
         "write",
@@ -20,7 +21,8 @@
     },
     {
       "names": [
-        "logstash"
+        "logstash",
+        "ecs-logstash"
       ],
       "privileges": [
         "write",