From 6437351c8df76949d1c358adee999002024b2a04 Mon Sep 17 00:00:00 2001
From: "Lee E. Hinman" <lee.e.hinman@elastic.co>
Date: Mon, 30 Nov 2020 15:54:02 -0600
Subject: [PATCH] update docs

---
 filebeat/docs/fields.asciidoc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
index 914a68b4470..74d6716e405 100644
--- a/filebeat/docs/fields.asciidoc
+++ b/filebeat/docs/fields.asciidoc
@@ -1369,6 +1369,19 @@ type: keyword
 
 --
 
+*`aws.cloudtrail.event_category`*::
++
+--
+Shows the event category that is used in LookupEvents calls.
+
+ - For management events, the value is management.
+ - For data events, the value is data.
+ - For Insights events, the value is insight.
+
+type: keyword
+
+--
+
 [float]
 === console_login