diff --git a/src/legacy/core_plugins/kibana/server/tutorials/nats_logs/index.js b/src/legacy/core_plugins/kibana/server/tutorials/nats_logs/index.js
new file mode 100644
index 0000000000000..143789c8ff615
--- /dev/null
+++ b/src/legacy/core_plugins/kibana/server/tutorials/nats_logs/index.js
@@ -0,0 +1,64 @@
+/*
+ * Licensed to Elasticsearch B.V. under one or more contributor
+ * license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright
+ * ownership. Elasticsearch B.V. licenses this file to you under
+ * the Apache License, Version 2.0 (the "License"); you may
+ * not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import { i18n }  from '@kbn/i18n';
+import { TUTORIAL_CATEGORY } from '../../../common/tutorials/tutorial_category';
+import { onPremInstructions, cloudInstructions, onPremCloudInstructions } from '../../../common/tutorials/filebeat_instructions';
+
+export function natsLogsSpecProvider(server, context) {
+  const moduleName = 'nats';
+  const geoipRequired = false;
+  const uaRequired = false;
+  const platforms = ['DEB', 'RPM'];
+  return {
+    id: 'natsLogs',
+    name: i18n.translate('kbn.server.tutorials.natsLogs.nameTitle', {
+      defaultMessage: 'Nats logs',
+    }),
+    category: TUTORIAL_CATEGORY.LOGGING,
+    isBeta: true,
+    shortDescription: i18n.translate('kbn.server.tutorials.natsLogs.shortDescription', {
+      defaultMessage: 'Collect and parse logs created by Nats.',
+    }),
+    longDescription: i18n.translate('kbn.server.tutorials.natsLogs.longDescription', {
+      defaultMessage: 'The `nats` Filebeat module parses logs created by Nats. \
+[Learn more]({learnMoreLink}).',
+      values: {
+        learnMoreLink: '{config.docs.beats.filebeat}/filebeat-module-nats.html',
+      },
+    }),
+    euiIconType: 'logoNats',
+    artifacts: {
+      application: {
+        label: i18n.translate('kbn.server.tutorials.natsLogs.artifacts.application.label', {
+          defaultMessage: 'Discover',
+        }),
+        path: '/app/kibana#/discover'
+      },
+      dashboards: [],
+      exportedFields: {
+        documentationUrl: '{config.docs.beats.filebeat}/exported-fields-nats.html'
+      }
+    },
+    completionTimeMinutes: 10,
+    onPrem: onPremInstructions(moduleName, platforms, geoipRequired, uaRequired, context),
+    elasticCloud: cloudInstructions(moduleName, platforms),
+    onPremElasticCloud: onPremCloudInstructions(moduleName, platforms)
+  };
+}
diff --git a/src/legacy/core_plugins/kibana/server/tutorials/register.js b/src/legacy/core_plugins/kibana/server/tutorials/register.js
index 224647e2d9532..d3e744a889e6c 100644
--- a/src/legacy/core_plugins/kibana/server/tutorials/register.js
+++ b/src/legacy/core_plugins/kibana/server/tutorials/register.js
@@ -66,7 +66,7 @@ import { cloudwatchLogsSpecProvider } from './cloudwatch_logs';
 import { awsMetricsSpecProvider } from './aws_metrics';
 import { mssqlMetricsSpecProvider } from './mssql_metrics';
 import { zeekLogsSpecProvider } from './zeek_logs';
-import { natsMetricsSpecProvider } from './nats_metrics';
+import { natsLogsSpecProvider } from './nats_logs';
 
 export function registerTutorials(server) {
   server.registerTutorial(systemLogsSpecProvider);
@@ -118,5 +118,5 @@ export function registerTutorials(server) {
   server.registerTutorial(awsMetricsSpecProvider);
   server.registerTutorial(mssqlMetricsSpecProvider);
   server.registerTutorial(zeekLogsSpecProvider);
-  server.registerTutorial(natsMetricsSpecProvider);
+  server.registerTutorial(natsLogsSpecProvider);
 }