[ecs] Update fields.ecs.yml to 1.12 (#27770) (#28216)

* Update fields.ecs.yml to 1.12

* Fallback to text when match_only_text is unavailable

* Add changelog entry

* Amend changelog entry

* Remove duplicated service.address field from metricbeat

(cherry picked from commit cca59ba)

Co-authored-by: Marc Guasch <marc-gr@users.noreply.github.com>

CHANGELOG.next.asciidoc

@@ -307,6 +307,8 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Add default seccomp policy for linux arm64. {pull}27955[27955]
 - Add cluster level add_kubernetes_metadata support for centralized enrichment {pull}24621[24621]
 - Update cloud.google.com/go library. {pull}28229[28229]
+- Update ECS to 1.12.0. {pull}27770[27770]
+- Fields mapped as `match_only_text` will automatically fallback to a `text` mapping when using Elasticsearch versions that do not support `match_only_text`. {pull}27770[27770]
 
 *Auditbeat*
 

NOTICE.txt

@@ -6112,11 +6112,11 @@ This Agreement is governed by the laws of the State of New York and the intellec
 
 --------------------------------------------------------------------------------
 Dependency : github.com/elastic/ecs
-Version: v1.11.0
+Version: v1.12.0
 Licence type (autodetected): Apache-2.0
 --------------------------------------------------------------------------------
 
-Contents of probable licence file $GOMODCACHE/github.com/elastic/ecs@v1.11.0/LICENSE.txt:
+Contents of probable licence file $GOMODCACHE/github.com/elastic/ecs@v1.12.0/LICENSE.txt:
 
 
                                  Apache License

auditbeat/cmd/root.go

@@ -35,7 +35,7 @@ const (
 	Name = "auditbeat"
 
 	// ecsVersion specifies the version of ECS that Auditbeat is implementing.
-	ecsVersion = "1.11.0"
+	ecsVersion = "1.12.0"
 )
 
 // RootCmd for running auditbeat.