[Filebeat] Remove alias fields from Suricata and Traefik module mappings

[andrewkroh]

What does this PR do?

Alias fields are displayed in Kibana whenever their target exists in a document. This yields
confusing results when, for example, you are looking at Zeek module events but see many
suricata.eve.* fields just because Zeek populates many ECS fields.

This is a breaking change for users that depend on the Suricata or Traefik alias fields. Because these
aliases cause issues for all users I think it's best to remove them.

The following alias fields are removed:

suricata.eve.fileinfo.filename
suricata.eve.fileinfo.size
suricata.eve.dest_port
suricata.eve.src_port
suricata.eve.proto
suricata.eve.src_ip
suricata.eve.dest_ip
suricata.eve.http.status
suricata.eve.http.http_user_agent
suricata.eve.http.http_refer
suricata.eve.http.url
suricata.eve.http.hostname
suricata.eve.http.http_refer
suricata.eve.http.url
suricata.eve.http.hostname
suricata.eve.http.length
suricata.eve.http.http_method
suricata.eve.alert.severity
suricata.eve.alert.action
suricata.eve.flow.bytes_toclient
suricata.eve.flow.start
suricata.eve.flow.pkts_toclient
suricata.eve.flow.bytes_toserver
suricata.eve.flow.pkts_toserver
suricata.eve.app_proto
traefik.access.user_agent.device

Relates: #10535

Why is it important?

Removing the aliases will result in more concise results in Kibana when looking a documents. And the documents will only have fields related to one particular module.

Checklist

• My code follows the style guidelines of this project
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Related issues

• Relates [Filebeat] Field aliases yield confusing Kibana Discovery results  #10535

Screenshots

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2021-07-12T20:11:26.307+0000

• Duration: 94 min 20 sec

• Commit: d7ed5d1

Test stats 🧪

Test	Results
Failed	0
Passed	14804
Skipped	2312
Total	17116

Trends 🧪

💚 Flaky test report

Tests succeeded.

Expand to view the summary

Test stats 🧪

Test	Results
Failed	0
Passed	14804
Skipped	2312
Total	17116

[andrewkroh]

run elasticsearch-ci/docs

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b bugfix/fb/remove-suricata-alias-fields upstream/bugfix/fb/remove-suricata-alias-fields
git merge upstream/master
git push upstream bugfix/fb/remove-suricata-alias-fields