Take a look at the example conditional output here for how to do what you want - Filebeat conditional output logstash
Also, please format your code/logs/config using the </> button, or markdown style back ticks. It helps to make things easy to read which helps us help you 