Hello @David_Oceans , sorry for the delay on this, it slipped through my notifications.
We had a discussion about this internally, and there should be a way to tackle this.
First I suggest you to have a look at this other discussion, as it seems related: Send k8s logs with Filebeat to separate indices - #2 by jbury
Otherwise this is possible using logstash, between filebeat and Elasticsearch.