@ag4ve the whole ELK stack really doesn't mind passing json around, I'm not sure I see the use case over shipping the json to ES any of several ways