---
title: Exported fields
description: This document describes the fields that are exported by Winlogbeat. They are grouped in the following categories: Beat fields, Cloud provider metadata...
url: https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields
products:
  - Beats
  - Winlogbeat
applies_to:
  - Elastic Stack: Generally available
---

# Exported fields
This document describes the fields that are exported by Winlogbeat. They are grouped in the following categories:
- [*Beat fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-beat-common)
- [*Cloud provider metadata fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-cloud)
- [*Docker fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-docker-processor)
- [*ECS fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-ecs)
- [*Legacy Winlogbeat alias fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-eventlog)
- [*Host fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-host-processor)
- [*Jolokia Discovery autodiscover provider fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-jolokia-autodiscover)
- [*Kubernetes fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-kubernetes-processor)
- [*PowerShell module fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-powershell)
- [*Process fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-process)
- [*Security module fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-security)
- [*Sysmon module fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-sysmon)
- [*Winlogbeat fields*](https://www.elastic.co/docs/reference/beats/winlogbeat/exported-fields-winlog)