[Filebeat] Populate source/destination.mac for Suricata

[andrewkroh]

What does this PR do?

When 'ethernet' is enabled in Suricata with will log the mac addresses.
ECS has fields for the MAC addresses so this renames the two Suricata
fields to follow the ECS conventions.

Closes #23706

Why is it important?

This make the fields consistent between data sources.

Checklist

• My code follows the style guidelines of this project
• [ ] I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• ~[ ] I have made corresponding change to the default configuration files`
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Related issues

• Closes Add MAC address mapping to ECS in Filebeat Suricata module #23706

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[andrewkroh]

run tests

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Build Cause: andrewkroh commented: run tests

• • Start Time: 2021-02-03T06:25:03.499+0000

• Duration: 48 min 17 sec

• Commit: 539e4ca

Test stats 🧪

Test	Results
Failed	0
Passed	13000
Skipped	2033
Total	15033

💚 Flaky test report

Tests succeeded.

Expand to view the summary

Test stats 🧪

Test	Results
Failed	0
Passed	13000
Skipped	2033
Total	15033

[andrewkroh]

run tests

[andrewkroh]

run tests