How to use nginx's host overwrite logstash's host information when send it by filebeat?

Question

Now using filebeat and logstash sending nginx\'s json log on k8s.

The nginx\'s configuration likes

nginx.conf

http {
    log_format bucket escap