event[@source] here will support what you propose already; if it doesn't, it's a bug.

Here's what I mean:

```
  geoip { source => "[client_data][ip]" }
```

The above is how you say "the ip address is actually in this nested field.

Is this not working?