Logstash comes in very handy when it is necessary to manipulate or augment data before the actual consolidation. Typical examples of augmentation include IP address to customer ID mappings and geolocation, just to name a few.
ntopng natively supports network flows export to Logstash. The following video tutorial demonstrates this feature.