Update text fields in event mapping to ensure efficient facets

[RasonJ]

events.message needs to be changed to keyword to allow facets on top searches

Both "text" and "keyword" fields should have reasonable limits in length.