diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
index 914a68b4470..74d6716e405 100644
--- a/filebeat/docs/fields.asciidoc
+++ b/filebeat/docs/fields.asciidoc
@@ -1369,6 +1369,19 @@ type: keyword
 
 --
 
+*`aws.cloudtrail.event_category`*::
++
+--
+Shows the event category that is used in LookupEvents calls.
+
+ - For management events, the value is management.
+ - For data events, the value is data.
+ - For Insights events, the value is insight.
+
+type: keyword
+
+--
+
 [float]
 === console_login