[DOCS] More ES|QL getting started updates (#102980)

* [DOCS] More ES|QL getting started updates

* Change 'server.ip' into 'server_ip'

docs/reference/esql/esql-get-started.asciidoc

@@ -298,10 +298,10 @@ string, you can use the following `DISSECT` command:
 include::{esql-specs}/dissect.csv-spec[tag=gs-dissect]
 ----
 
-This adds a `server.ip` column to those rows that have a `message` that matches
-this pattern. For other rows, the value of `server.ip` is `null`.
+This adds a `server_ip` column to those rows that have a `message` that matches
+this pattern. For other rows, the value of `server_ip` is `null`.
 
-You can use the new `server.ip` column that's added by the `DISSECT` command in
+You can use the new `server_ip` column that's added by the `DISSECT` command in
 subsequent commands. For example, to determine how many connections each server
 has accepted:
 

docs/reference/tab-widgets/esql/esql-getting-started-enrich-policy.asciidoc

@@ -10,7 +10,7 @@ PUT clientips
 {
   "mappings": {
     "properties": {
-      "client.ip": {
+      "client_ip": {
         "type": "keyword"
       },
       "env": {
@@ -22,21 +22,21 @@ PUT clientips
 
 PUT clientips/_bulk
 { "index" : {}}
-{ "client.ip": "172.21.0.5", "env": "Development" }
+{ "client_ip": "172.21.0.5", "env": "Development" }
 { "index" : {}}
-{ "client.ip": "172.21.2.113", "env": "QA" }
+{ "client_ip": "172.21.2.113", "env": "QA" }
 { "index" : {}}
-{ "client.ip": "172.21.2.162", "env": "QA" }
+{ "client_ip": "172.21.2.162", "env": "QA" }
 { "index" : {}}
-{ "client.ip": "172.21.3.15", "env": "Production" }
+{ "client_ip": "172.21.3.15", "env": "Production" }
 { "index" : {}}
-{ "client.ip": "172.21.3.16", "env": "Production" }
+{ "client_ip": "172.21.3.16", "env": "Production" }
 
 PUT /_enrich/policy/clientip_policy
 {
   "match": {
     "indices": "clientips",
-    "match_field": "client.ip",
+    "match_field": "client_ip",
     "enrich_fields": ["env"]
   }
 }