[ecs] Update fields.ecs.yml to 1.12

[marc-gr]

What does this PR do?

• fields.ecs.yml to ECS 1.12.0-dev
• bump ecs.version in configs for modules that don't require changes.

Why is it important?

• keep up to date with ECS changes
• allows modules to use new ECS fields

Checklist

• My code follows the style guidelines of this project
  - [ ] I have commented my code, particularly in hard-to-understand areas
  - [ ] I have made corresponding changes to the documentation
  - [ ] I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

How to test this PR locally

cd filebeat && mage pythonIntegTest
cd x-pack/filebeat && mage pythonIntegTest

Closes #27835

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2021-09-30T09:58:37.850+0000

• Duration: 223 min 50 sec

• Commit: 0dccfea

Test stats 🧪

Test	Results
Failed	0
Passed	54147
Skipped	5328
Total	59475

💚 Flaky test report

Tests succeeded.

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

• /package : Generate the packages and run the E2E tests.

• /beats-tester : Run the installation tests with beats-tester.

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b ecs-1.12 upstream/ecs-1.12
git merge upstream/master
git push upstream ecs-1.12

[andrewkroh]

This changes message to use match_only_text which was introduced in 7.14. I think libbeat should fall-back to text if that type is not available. We added something similar for wildcard at

beats/libbeat/template/processor.go

Lines 90 to 96 in 7a49ca1

	case "wildcard":
	noWildcards := p.EsVersion.LessThan(minVersionWildcard)
	if !p.ElasticLicensed || noWildcards {
	indexMapping = p.keyword(&field)
	} else {
	indexMapping = p.wildcard(&field)
	}

.

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b ecs-1.12 upstream/ecs-1.12
git merge upstream/master
git push upstream ecs-1.12

[leehinman]

LGTM

[mdelapenya]

From E2E stand point, I'd say this PR is OK, as the errors we are seeing in the build history are considered flaky