Logstash Suricata configs

logstash-forwarder.conf

{
  "network": {
    "servers": [ "x.x.x.x:5043" ],
    "ssl certificate": "./lumberjack.pub",
    "ssl key": "./lumberjack.key",
    "ssl ca": "./lumberjack.pub"
  },
  "files": [
    {
      "paths": [ "/var/log/suricata/eve.json" ],
      "fields": { "type": "suricata" }
    }
  ]
}

logstash.conf

input {
  lumberjack {
    # The port to listen on
    port => 5043

    # The paths to your ssl cert and key
    ssl_certificate => "/etc/logstash/pki/lumberjack.pub"
    ssl_key => "/etc/logstash/pki/lumberjack.key"

    # Set this to whatever you want.
    codec => json
  }
}

#geoip part
filter {
  if [src_ip] {
    geoip {
      source => "src_ip"
      target => "geoip"
      database => "/etc/logstash/geoip/GeoLiteCity.dat"
      add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
      add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}"  ]
    }
    mutate {
      convert => [ "[geoip][coordinates]", "float" ]
    }
  }
}

output {
  elasticsearch { embedded => true }
}

How I combine lumberjack to receive normals logs and also JSON? Thanks