Filebeat Script for Netflow data enrichment

Hi,
I am using filebeat netflow module for traffic monitor. But the document don't have interface name. I want to add a python script for filebeat to process before it sends the data to elastc so that it takes interface name from a lookup table using netflow.ingress/egress.interface (ifindex). Can someone give example on how to do it?