diff --git a/Formula/logstash.rb b/Formula/logstash.rb
index 18c0d9e0e4100..52c92cbc1bebc 100644
--- a/Formula/logstash.rb
+++ b/Formula/logstash.rb
@@ -1,8 +1,8 @@
 class Logstash < Formula
   desc "Tool for managing events and logs"
   homepage "https://www.elastic.co/products/logstash"
-  url "https://github.com/elastic/logstash/archive/v8.6.1.tar.gz"
-  sha256 "cde9743f311bfafe2b816e9c4d6bb5c12dbfde07545ecf0b641e1ae47facc888"
+  url "https://github.com/elastic/logstash/archive/v8.7.0.tar.gz"
+  sha256 "6693a60a4dbe0e09b258225750e86615842bc9942d31e80b097ed17cc8b5c4cc"
   license "Apache-2.0"
   version_scheme 1
   head "https://github.com/elastic/logstash.git", branch: "main"
@@ -13,13 +13,13 @@ class Logstash < Formula
   end
 
   bottle do
-    sha256 cellar: :any,                 arm64_ventura:  "1cfedbd506877a19f10fb8b61e106bc69e6b23f9118c8b8382bcfe8f5f5eec61"
-    sha256 cellar: :any,                 arm64_monterey: "7cd5824518bbbcc86fb48d1464faa65b234df33f05c97c5425bd93d9191ed9d7"
-    sha256 cellar: :any,                 arm64_big_sur:  "5884c4bfc8c7fc705d1805d7464a94a4ed9345b8eafdd6cc7bbf8267f54cc534"
-    sha256 cellar: :any,                 ventura:        "676f3a933e53d26425693547fce45ef935cb470e90d7d45d3e61f2a956e4f265"
-    sha256 cellar: :any,                 monterey:       "be7960fbc343b439cee138943a5cee47d8f5172844c8bc3ae0d967603901c96c"
-    sha256 cellar: :any,                 big_sur:        "fb10797f071a004a684edf4c3030609211a45199f160b9d283d720933277f8db"
-    sha256 cellar: :any_skip_relocation, x86_64_linux:   "10be251cc931dbcc1368de32e653207a0d4086c7d7f39c592c0fb7a03f148a8c"
+    sha256 cellar: :any,                 arm64_ventura:  "da7e3665bf90db0c92097d108d52d42bda350da1d4fbf07d461f71ff5c59692a"
+    sha256 cellar: :any,                 arm64_monterey: "0f03d73ca84ce63c017798c91f0b4d2a4eafa38b078382c4216cb9a41a6e3a96"
+    sha256 cellar: :any,                 arm64_big_sur:  "98567148b56299c8499d073cc42672b2b0bbab0eae6233fa9d2dbd38185541de"
+    sha256 cellar: :any,                 ventura:        "bfd80e545bde55ba9587b71b6f50fbb7adf56aa488215076e80db32a4c4b7699"
+    sha256 cellar: :any,                 monterey:       "412ef5fdbcf5934e3591b789cc19f961eea2a71bf6727e7cadbea5d11e4f3e4c"
+    sha256 cellar: :any,                 big_sur:        "3a2a448104bd9a31e0848c56c9308cefdba0512a6480e82da8d14b7533919233"
+    sha256 cellar: :any_skip_relocation, x86_64_linux:   "5b2d058edbb1aecc639f5142a0e7a37887a9bcf272526527d3e357cdbe7f1f33"
   end
 
   depends_on "openjdk@17"
@@ -60,7 +60,7 @@ def install
     # Delete Windows and other Arch/OS files
     paths_to_keep = OS.linux? ? "#{Hardware::CPU.arch}-#{OS.kernel_name}" : OS.kernel_name
     rm Dir["bin/*.bat"]
-    Dir["vendor/jruby/lib/jni/*"].each do |path|
+    Dir["vendor/jruby/tmp/lib/jni/*"].each do |path|
       rm_r path unless path.include? paths_to_keep
     end
 
@@ -93,7 +93,6 @@ def caveats
   end
 
   test do
-    # workaround https://github.com/elastic/logstash/issues/6378
     (testpath/"config").mkpath
     ["jvm.options", "log4j2.properties", "startup.options"].each do |f|
       cp prefix/"libexec/config/#{f}", testpath/"config"