How to configure Filebeat “AWS module vpcflow” to drop record when the source ip and destination ip are from a private subnet

Question

The architecture is Filebeat (7.10.2) directly to Elasticsearch (7.10.2)

Thanks,

-Alfred