apm: add ECS fields to index pattern

[graphaelli]

This PR updates the Kibana index pattern to include newly introduced fields for APM.

To be backported to 6.x, where these will be aliases.

for elastic/apm-server#1582

[elasticmachine]

💚 Build Succeeded

• continuous-integration/kibana-ci/pull-request

[elasticmachine]

Pinging @elastic/apm-ui

[jasonrhodes]

Here's what I see, does this look correct @graphaelli ?
New field names:

[
  "agent.ephemeral_id",
  "agent.hostname",
  "agent.id",
  "agent.type",
  "agent.version",
  "base.@timestamp",
  "base.labels",
  "base.message",
  "base.tags",
  "cloud.account.id",
  "cloud.availability_zone",
  "cloud.instance.id",
  "cloud.instance.name",
  "cloud.machine.type",
  "cloud.provider",
  "cloud.region",
  "container.id",
  "container.image.name",
  "container.image.tag",
  "container.labels",
  "container.name",
  "container.runtime",
  "destination.domain",
  "destination.geo.city_name",
  "destination.geo.continent_name",
  "destination.geo.country_iso_code",
  "destination.geo.location",
  "destination.geo.region_iso_code",
  "destination.geo.region_name",
  "destination.ip",
  "destination.mac",
  "destination.port",
  "device.hostname",
  "device.ip",
  "device.mac",
  "device.serial_number",
  "device.timezone.offset.sec",
  "device.type",
  "device.vendor",
  "device.version",
  "event.action",
  "event.category",
  "event.created",
  "event.dataset",
  "event.duration",
  "event.hash",
  "event.id",
  "event.module",
  "event.original",
  "event.risk_score",
  "event.risk_score_norm",
  "event.severity",
  "event.type",
  "event.version",
  "file.ctime",
  "file.device",
  "file.extension",
  "file.gid",
  "file.group",
  "file.inode",
  "file.mode",
  "file.mtime",
  "file.owner",
  "file.path",
  "file.path.raw",
  "file.size",
  "file.target_path",
  "file.target_path.raw",
  "file.type",
  "file.uid",
  "geo.city_name",
  "geo.continent_name",
  "geo.country_iso_code",
  "geo.location",
  "geo.region_name",
  "host.os.name",
  "host.timezone.offset.sec",
  "host.type",
  "http.request.method",
  "http.response.body",
  "http.response.status_code",
  "http.version",
  "log.level",
  "log.original",
  "network.direction",
  "network.forwarded_ip",
  "network.inbound.bytes",
  "network.inbound.packets",
  "network.name",
  "network.name.raw",
  "network.outbound.bytes",
  "network.outbound.packets",
  "network.protocol",
  "network.total.bytes",
  "network.total.packets",
  "organization.id",
  "organization.name",
  "os.family",
  "os.kernel",
  "os.name",
  "os.platform",
  "os.version",
  "process.args",
  "process.name",
  "process.pid",
  "process.ppid",
  "process.title",
  "service.ephemeral_id",
  "service.id",
  "service.name",
  "service.state",
  "service.type",
  "service.version",
  "source.domain",
  "source.geo.city_name",
  "source.geo.continent_name",
  "source.geo.country_iso_code",
  "source.geo.location",
  "source.geo.region_iso_code",
  "source.geo.region_name",
  "source.ip",
  "source.mac",
  "source.port",
  "url.fragment",
  "url.hostname",
  "url.href",
  "url.href.raw",
  "url.password",
  "url.path",
  "url.path.raw",
  "url.port",
  "url.query",
  "url.query.raw",
  "url.scheme",
  "url.username",
  "user.email",
  "user.hash",
  "user.id",
  "user.name",
  "user_agent.device",
  "user_agent.major",
  "user_agent.minor",
  "user_agent.name",
  "user_agent.original",
  "user_agent.os.major",
  "user_agent.os.minor",
  "user_agent.os.name",
  "user_agent.os.version",
  "user_agent.patch",
  "user_agent.version"
]

Old field names no longer here:

[
  "beat.version",
  "error.code"
]

[jasonrhodes]

If the lists in my PR comment look correct to @graphaelli, LGTM

[graphaelli]

That's right. error.code will return shortly but with a different type.