Cherry-pick #24564 to 7.12: Set event.type for Packetbeat flow events

[andrewkroh]

Cherry-pick of PR #24564 to 7.12 branch. Original message:

What does this PR do?

Add event.type: [connection] to flow events and include end for final flows.

Why is it important?

This helps the data comply to ECS.

Checklist

• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Logs

  "event": {
    "type": [
      "connection",
      "end"
    ],
    "start": "2021-03-16T15:14:29.826Z",
    "end": "2021-03-16T15:14:29.826Z",
    "duration": 273694,
    "dataset": "flow",
    "kind": "event",
    "category": [
      "network"
    ],
    "action": "network_flow"
  }

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Build Cause: Pull request #24633 updated

• Start Time: 2021-03-18T22:01:46.836+0000

• Duration: 37 min 2 sec

• Commit: 2ff7590

Test stats 🧪

Test	Results
Failed	0
Passed	4906
Skipped	45
Total	4951

Trends 🧪

💚 Flaky test report

Tests succeeded.

Expand to view the summary

Test stats 🧪

Test	Results
Failed	0
Passed	4906
Skipped	45
Total	4951

[marc-gr]

LGTM but seems to need an update