Add a new field with a specifically formatted timestamp from @timestamp

To format a timestamp as a string, use a ruby filter and strftime. There is an example here. To prepend it to the message field you can use

mutate { replace => { "message" => "%{[@metadata][someField]} %{message}" } }