diff --git a/.github/workflows/db_apply_anonimized.yml b/.github/workflows/db_apply_anonimized.yml
index 9eafd59f8..fb8009d3e 100644
--- a/.github/workflows/db_apply_anonimized.yml
+++ b/.github/workflows/db_apply_anonimized.yml
@@ -25,6 +25,16 @@ jobs:
           string: ${{ vars.ENV_NAME }}
       - name: Checkout repo
         uses: actions/checkout@v4
+      - name: Stop Logstash for ${{ vars.ENV_NAME }}
+        if: ${{ (vars.ENV_NAME != 'Production' && vars.ENV_NAME != 'Staging' && vars.ENV_NAME) && inputs.restore-db == true}}
+        run: |
+          docker run --rm \
+              -e AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} \
+              -e AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }} \
+              -e AWS_DEFAULT_REGION=eu-west-1 \
+              amazon/aws-cli \
+              ecs update-service --desired-count 0 --cluster=ecsOpenSupplyHub${{vars.ENV_NAME}}Cluster \
+              --service=OpenSupplyHub${{vars.ENV_NAME}}AppLogstash  --region=eu-west-1
       - name: Get Opensearch domain, filesystems and accespoint ids for ${{ vars.ENV_NAME }}
         id: export_variables
         run: |