"destination.geo.country_iso_code" field with logstash geoip?

Hi Mark,

you understand well :slight_smile:

I was wondering if there is any way to do it (change output name, rename field or other), and want to understand the difference between filter and the processor which have this "coutry_iso_code" with the same Maxmind database (see GeoIP processor | Elasticsearch Reference [7.10] | Elastic)