diff --git a/doc/05-service-monitoring.md b/doc/05-service-monitoring.md
index 19aa196e1..26b4a48ca 100644
--- a/doc/05-service-monitoring.md
+++ b/doc/05-service-monitoring.md
@@ -953,7 +953,7 @@ Instead, choose a plugin and configure its parameters and thresholds. The follow
### Log Monitoring
* [check_logfiles](https://labs.consol.de/nagios/check_logfiles/)
-* [check_logstash](https://github.com/widhalmt/check_logstash)
+* [check_logstash](https://github.com/NETWAYS/check_logstash)
* [check_graylog2_stream](https://github.com/Graylog2/check-graylog2-stream)
### Virtualization Monitoring
diff --git a/doc/10-icinga-template-library.md b/doc/10-icinga-template-library.md
index 983a47db1..838ac8f8d 100644
--- a/doc/10-icinga-template-library.md
+++ b/doc/10-icinga-template-library.md
@@ -2938,7 +2938,7 @@ This category includes all plugins for log management, for example [Logstash](ht
#### logstash
-The [logstash](https://github.com/widhalmt/check_logstash) plugin connects to
+The [logstash](https://github.com/NETWAYS/check_logstash) plugin connects to
the Node API of Logstash. This plugin requires at least Logstash version 5.0.x.
The Node API is not activated by default. You have to configure your Logstash