You could use an ingest pipeline and define several dissect processor in it. using ingest pipeline moves the dissect process to elasticsearch rather than filebeat and it's easier to debug your problems with simulate API.
Take look at this. it might help.
If you could send me your dissect pattern I might be able to find the problem.
thanks
Borna