---
title: Exported fields
description: This document describes the fields that are exported by Filebeat. They are grouped in the following categories: ActiveMQ fields, Apache fields, Auditd...
url: https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields
products:
  - Beats
  - Filebeat
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Exported fields
This document describes the fields that are exported by Filebeat. They are grouped in the following categories:
- [*ActiveMQ fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-activemq)
- [*Apache fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-apache)
- [*Auditd fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-auditd)
- [*AWS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-aws)
- [*AWS CloudWatch fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-aws-cloudwatch)
- [*AWS Fargate fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-awsfargate)
- [*Azure fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-azure)
- [*Beat fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-beat-common)
- [*Decode CEF processor fields fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-cef)
- [*CEF fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-cef-module)
- [*Check Point fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-checkpoint)
- [*Cisco fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-cisco)
- [*Cloud provider metadata fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-cloud)
- [*CoreDNS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-coredns)
- [*CrowdStrike fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-crowdstrike)
- [*Cyberark PAS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-cyberarkpas)
- [*Docker fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-docker-processor)
- [*ECS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-ecs)
- [*Elasticsearch fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-elasticsearch)
- [*Envoyproxy fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-envoyproxy)
- [*Fortinet fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-fortinet)
- [*Google Cloud Platform (GCP) fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-gcp)
- [*Google Workspace fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-google_workspace)
- [*HAProxy fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-haproxy)
- [*Host fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-host-processor)
- [*IBM MQ fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-ibmmq)
- [*Icinga fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-icinga)
- [*IIS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-iis)
- [*Iptables fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-iptables)
- [*Jolokia Discovery autodiscover provider fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-jolokia-autodiscover)
- [*Juniper JUNOS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-juniper)
- [*Kafka fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-kafka)
- [*Kibana fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-kibana)
- [*Kubernetes fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-kubernetes-processor)
- [*Log file content fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-log)
- [*Logstash fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-logstash)
- [*Lumberjack fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-lumberjack)
- [*Microsoft fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-microsoft)
- [*MISP fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-misp)
- [*MongoDB fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-mongodb)
- [*MSSQL fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-mssql)
- [*MySQL fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-mysql)
- [*MySQL Enterprise fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-mysqlenterprise)
- [*NATS fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-nats)
- [*NetFlow fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-netflow)
- [*Nginx fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-nginx)
- [*Office 365 fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-o365)
- [*Okta fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-okta)
- [*Oracle fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-oracle)
- [*Osquery fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-osquery)
- [*Palo Alto Networks fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-panw)
- [*Pensando fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-pensando)
- [*PostgreSQL fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-postgresql)
- [*Process fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-process)
- [*RabbitMQ fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-rabbitmq)
- [*Redis fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-redis)
- [*s3 fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-s3)
- [*Salesforce fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-salesforce)
- [*Google Santa fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-santa)
- [*Snyk fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-snyk)
- [*Sophos fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-sophos)
- [*Suricata fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-suricata)
- [*System fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-system)
- [*Threat Intel fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-threatintel)
- [*Traefik fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-traefik)
- [*Windows ETW fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-winlog)
- [*Zeek (Bro) fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-zeek)
- [*ZooKeeper fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-zookeeper)
- [*Zoom fields*](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-zoom)