Filebeat Add Fields Processor, this will execute the pipeline and create the new field at ingest time.