Exported fields

This document describes the fields that are exported by Winlogbeat. They are grouped in the following categories:

• Beat fields
• Cloud provider metadata fields
• Docker fields
• ECS fields
• Legacy Winlogbeat alias fields
• Host fields
• Jolokia Discovery autodiscover provider fields
• Kubernetes fields
• PowerShell module fields
• Process fields
• Security module fields
• Sysmon module fields
• Winlogbeat fields