Add nested field with logstash and JDBC

You can use jdbc_streaming filter for that, to do what we call enrichment.

The linked doc has quite a good example.