We have filebeat apache module enabled which sends to data to logstash for further enrichment (geoip, add more fields for our visualizations etc).
but im not sure if its possible.
this is what we're trying to do..
//We need to access the module fields including the complete ECS fields to enrich geographic locations of our customer
//es with pipeline defined