Thanks for you reply.
But this did not work for me. Can you tell me if the following is supposed to work or am I missing something?
We use docker/kubernetes. Instead of rebuilding the entire binary, i adjusted the Dockerfile as follows to include the modified "nginx/access/ingest/default.json" where i removed all references to geoip processor.
COPY fields.yml /usr/share/filebeat/fields.yml
/usr/share/filebeat/module/nginx/access/ingest/default.json #Added this line
With this docker image, I checked the running pod and the ingest file does not the geoip references.
But it did not work.