Search

Start free trial Contact Sales

Elastic Docs

Release notes
Reference
Extend and contribute
Content to pull from

Loading

Elastic
/ Reference
/ Ingestion tools
/ Beats
/ Winlogbeat
/

Exported fields

This document describes the fields that are exported by Winlogbeat. They are grouped in the following categories:

Beat fields
Cloud provider metadata fields
Docker fields
ECS fields
Legacy Winlogbeat alias fields
Host fields
Jolokia Discovery autodiscover provider fields
Kubernetes fields
PowerShell module fields
Process fields
Security module fields
Sysmon module fields
Winlogbeat fields