New fields used in the Auditbeat system module that need to be added to fields.ecs.yml:

1. network.type (used in the socket metricset)
2. process.start and process.working_directory (used in the process metricset)
3. event.kind (everywhere)