Container type event should parse status field

[marminthibaut]

Container events have a status field, formatted as string ("Up 36 minutes").

Dockerbeat could parse this string to extract two nested fields:

• state ("up", "stopped", etc.)
• time (in seconds: "2160")

Fields names are not definitive.