Add begining in logstash