diff --git a/CHANGELOG.md b/CHANGELOG.md
index 28f0edab379..e57045717a4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,7 @@ All notable changes to this project will be documented in this file based on the
 - Determine Elasticsearch index for an event based on UTC time #81
 - Fixing ES output's defaultDeadTimeout so that it is 60 seconds #103
 - Es outputer: fix timestamp conversion #91
+- Fix TLS insecure config option #239
 
 ### Added
 - Add logstash output plugin #151
diff --git a/outputs/logstash/transport.go b/outputs/logstash/transport.go
index 6426372372a..30b43b55450 100644
--- a/outputs/logstash/transport.go
+++ b/outputs/logstash/transport.go
@@ -105,6 +105,7 @@ func (c *tlsClient) Connect(timeout time.Duration) error {
 	tlsconfig.RootCAs = c.tls.RootCAs
 	tlsconfig.Certificates = c.tls.Certificates
 	tlsconfig.ServerName = host
+	tlsconfig.InsecureSkipVerify = c.tls.InsecureSkipVerify
 
 	if err := c.tcpClient.Connect(timeout); err != nil {
 		return c.onFail(err)