Keep all the schema files in sync #104

There's a lot of duplication over the different schema files (alerts and events). It'd be great if we could find a way to include files so we can avoid having to write the same subset information multiple times. This would be helpful for:

• host.*
• events.*
• user.*
• group.*
• destination.geo.*
• source.geo.*