Play nicer with ECS

[newtonne]

Currently the plugin populates the [host] field with a concrete value. This contradicts ECS which uses a host object, and therefore requires that the host value is renamed before doing anything else if you wish to conform your data to ECS.

I would suggest, instead, populating [host][hostname] and/or [@metadata][host].

Thanks.