diff --git a/nftnl/src/expr/log.rs b/nftnl/src/expr/log.rs
new file mode 100644
index 0000000..d73adca
--- /dev/null
+++ b/nftnl/src/expr/log.rs
@@ -0,0 +1,39 @@
+use super::{Expression, Rule};
+use nftnl_sys::{self as sys, libc::c_char};
+
+/// A log expression.
+pub struct Log {
+    group: Option<u16>,
+}
+
+impl Log {
+    pub fn new() -> Self {
+        Log { group: None }
+    }
+
+    pub fn new_with_group(group: u16) -> Self {
+        Log { group: Some(group) }
+    }
+}
+
+impl Expression for Log {
+    fn to_expr(&self, _rule: &Rule) -> *mut sys::nftnl_expr {
+        unsafe {
+            let expr = try_alloc!(sys::nftnl_expr_alloc(b"log\0" as *const _ as *const c_char));
+            if let Some(group) = self.group {
+                sys::nftnl_expr_set_u16(expr, sys::NFTNL_EXPR_LOG_GROUP as u16, group as u16);
+            };
+            expr
+        }
+    }
+}
+
+#[macro_export]
+macro_rules! nft_expr_log {
+    (group $group:expr) => {
+        $crate::expr::Log::new_with_group($group)
+    };
+    () => {
+        $crate::expr::Log::new()
+    };
+}
diff --git a/nftnl/src/expr/mod.rs b/nftnl/src/expr/mod.rs
index b4695fb..fb25fff 100644
--- a/nftnl/src/expr/mod.rs
+++ b/nftnl/src/expr/mod.rs
@@ -45,6 +45,9 @@ pub use self::ct::*;
 mod immediate;
 pub use self::immediate::*;
 
+mod log;
+pub use self::log::*;
+
 mod lookup;
 pub use self::lookup::*;