Fix duplicated-word typos and awkward CLI help phrase in user-facing text

[Copilot]

Fixes several duplicated-word typos and one unidiomatic phrase caught by the text auditor.

• Docs: Remove the the → the in filebeat-input-container.md, filebeat-input-log.md, filebeat-input-http_endpoint.md
• Docs: Remove of of → of in exported-fields-system.md
• CLI: Capitalize error creating file handler → Error creating file handler in libbeat/cmd/export/template.go and ilm_policy.go for consistency with adjacent fatal messages
• CLI: Replace by the moment → for now in libbeat/cmd/completion.go
• Update TestShellCompletion/awesomeshell to check stderr instead of stdout, matching the completion.go change that switched from fmt.Printf to cmd.PrintErrf for error output.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[text-auditor] Fix duplicated-word typos and one awkward CLI help phrase in user-facing text</issue_title>
<issue_description>## Text Improvements

The following user-facing text issues were found in the repository. Each is a low-effort fix.

1. Duplicate word in Filebeat container input docs

File: docs/reference/filebeat/filebeat-input-container.md (line 15)
Current text: Please use the the [\filestream`](/reference/filebeat/filebeat-input-filestream.md) input... **Suggested fix:**Please use the `filestream` input... **Why:** Clear typo (the the`) in user-facing documentation.

2. Duplicate word in Filebeat log input docs

File: docs/reference/filebeat/filebeat-input-log.md (line 15)
Current text: Please use the the [\filestream`](/reference/filebeat/filebeat-input-filestream.md) input... **Suggested fix:**Please use the `filestream` input... **Why:** Clear typo (the the`) in user-facing documentation.

3. Duplicate words in HTTP endpoint input docs

File: docs/reference/filebeat/filebeat-input-http_endpoint.md (line 13)
Current text: ...expression that converts the the JSON body...
Suggested fix: ...expression that converts the JSON body...
Why: Clear grammar typo (the the) in user-facing documentation.

4. Duplicate words in exported fields docs

File: docs/reference/metricbeat/exported-fields-system.md (line 472)
Current text: The total number of of milliseconds spent doing I/Os.
Suggested fix: The total number of milliseconds spent doing I/Os.
Why: Clear typo (of of) in user-facing exported fields text.

5. Inconsistent capitalization in fatal error output

File: libbeat/cmd/export/template.go (line 52), libbeat/cmd/export/ilm_policy.go (line 50)
Current text: error creating file handler: %s
Suggested fix: Error creating file handler: %s
Why: User-facing fatal errors in same command surface are otherwise capitalized (Error exporting ...), making this an unambiguous consistency fix.

6. Awkward CLI help phrase

File: libbeat/cmd/completion.go (line 32)
Current text: Output shell completion code for the specified shell (bash and zsh only by the moment)
Suggested fix: Output shell completion code for the specified shell (bash and zsh only for now)
Why: User-facing help text uses unidiomatic phrasing; correction is clear and low-effort.

Suggested Actions

• Remove duplicated words in docs/reference/filebeat/filebeat-input-container.md and docs/reference/filebeat/filebeat-input-log.md.
• Remove duplicated words in docs/reference/filebeat/filebeat-input-http_endpoint.md and docs/reference/metricbeat/exported-fields-system.md.
• Capitalize error creating file handler in both export command files for consistency.
• Replace by the moment with for now in CLI completion help text.

---

What is this? | From workflow: Text Auditor

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

• expires on Mar 11, 2026, 1:36 PM UTC

Comments on the Issue (you are @copilot in this section)

• Fixes [text-auditor] Fix duplicated-word typos and one awkward CLI help phrase in user-facing text #49267

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[mergify]

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @Copilot? 🙏.
For such, you'll need to label your PR with:

• The upcoming major version of the Elastic Stack
• The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-8./d is the label to automatically backport to the 8./d branch. /d is the digit
• backport-active-all is the label that automatically backports to all active branches.
• backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
• backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.

[github-actions]

Vale Linting Results

Summary: 133 warnings, 87 suggestions found

⚠️ Warnings (133)

File	Line	Rule	Message
docs/reference/auditbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/auditbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/filebeat/filebeat-input-container.md	13	Elastic.DontUse	Don't use 'just'.
docs/reference/filebeat/filebeat-input-container.md	15	Elastic.DontUse	Don't use 'Please'.
docs/reference/filebeat/filebeat-input-container.md	17	Elastic.Latinisms	Latin terms and abbreviations are a common source of confusion. Use 'for example' instead of 'e.g'.
docs/reference/filebeat/filebeat-input-log.md	15	Elastic.DontUse	Don't use 'Please'.
docs/reference/filebeat/filebeat-input-log.md	17	Elastic.Latinisms	Latin terms and abbreviations are a common source of confusion. Use 'for example' instead of 'e.g'.
docs/reference/filebeat/filebeat-module-mysqlenterprise.md	20	Elastic.DontUse	Don't use 'please'.
docs/reference/heartbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/heartbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/metricbeat/metricbeat-module-iis.md	30	Elastic.Latinisms	Latin terms and abbreviations are a common source of confusion. Use 'and so on' instead of 'etc'.
docs/reference/packetbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/packetbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	323	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	1050	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	5516	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	6012	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	7201	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	8575	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
docs/reference/winlogbeat/exported-fields-ecs.md	9651	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.

💡 Suggestions (87)

File	Line	Rule	Message
docs/reference/auditbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/auditbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/filebeat/filebeat-input-container.md	13	Elastic.WordChoice	Consider using 'deactivated, deselected, hidden, turned off, unavailable' instead of 'disabled', unless the term is in the UI.
docs/reference/filebeat/filebeat-input-log.md	13	Elastic.WordChoice	Consider using 'deactivated, deselected, hidden, turned off, unavailable' instead of 'disabled', unless the term is in the UI.
docs/reference/heartbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/heartbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/metricbeat/metricbeat-module-iis.md	31	Elastic.Wordiness	Consider using 'to' instead of 'in order to'.
docs/reference/packetbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/packetbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	323	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	1050	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	5516	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	6012	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	7201	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	8575	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.
docs/reference/winlogbeat/exported-fields-ecs.md	9651	Elastic.Wordiness	Consider using 'all' instead of 'all of '.

---

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

[github-actions]

🔍 Preview links for changed docs

• docs/extend/build-dashboards.md
• docs/reference/auditbeat/exported-fields-ecs.md
• docs/reference/filebeat/exported-fields-ecs.md
• docs/reference/filebeat/filebeat-input-container.md
• docs/reference/filebeat/filebeat-input-http_endpoint.md
• docs/reference/filebeat/filebeat-input-log.md
• docs/reference/filebeat/filebeat-module-mysqlenterprise.md
• docs/reference/filebeat/filebeat-reference-yml.md
• docs/reference/heartbeat/exported-fields-ecs.md
• docs/reference/heartbeat/monitor-http-options.md

More links …

• docs/reference/metricbeat/exported-fields-ecs.md
• docs/reference/metricbeat/exported-fields-system.md
• docs/reference/metricbeat/metricbeat-metricset-iis-application_pool.md
• docs/reference/metricbeat/metricbeat-metricset-iis-webserver.md
• docs/reference/metricbeat/metricbeat-module-http.md
• docs/reference/metricbeat/metricbeat-module-iis.md
• docs/reference/metricbeat/metricbeat-reference-yml.md
• docs/reference/metricbeat/monitoring-metricbeat-collection.md
• docs/reference/packetbeat/exported-fields-ecs.md
• docs/reference/winlogbeat/exported-fields-ecs.md
• docs/reference/winlogbeat/load-ingest-pipelines.md

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

This PR corrects typographical and formatting issues across documentation and help text in many Beats components (filebeat, metricbeat, heartbeat, packetbeat, winlogbeat, x-pack, and others). Changes remove duplicated words (e.g., "the the", "of of"), fix spacing/capitalization, adjust small examples, and replace one CLI phrase ("by the moment" → "for now"). No behavioral, functional, or public API changes are included.

Suggested labels

Filebeat, skip-changelog

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	PR fixes duplicated-word typos and awkward CLI phrasing across 40+ files, addressing all requirements from issue #49267.
Out of Scope Changes check	✅ Passed	All changes are in-scope typo corrections and text fixes directly aligned with issue #49267 objectives.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch copilot/fix-duplicated-word-typos

• 🛠️ Update Documentation: Commit on current branch
• 🛠️ Update Documentation: Create PR

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[elasticmachine]

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

[strawgate]

/ai address PR feedback and check for all user facing duplicate word typos in the codebase and resolve any incorrect usage you find

[rdner]

I ran make update and resolved conflicts with main.

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b copilot/fix-duplicated-word-typos upstream/copilot/fix-duplicated-word-typos
git merge upstream/main
git push upstream copilot/fix-duplicated-word-typos

[rdner]

/test

[strawgate]

/test

[github-actions]

TL;DR

check-docs failed in run 23061260911 because make check detected generated/updated output drift in libbeat/tests/integration/cmd_completion_test.go. Immediate action: run make update (or the targeted update command), commit the resulting change(s), and re-run CI.

Remediation

• On the PR branch, run make update from repo root (or cd libbeat && mage update) to refresh files after the completion command/test edits.
• Commit the regenerated/formatted libbeat/tests/integration/cmd_completion_test.go (and any coupled generated files if produced).
• Re-run check-docs and confirm make check passes with no “some files are not up-to-date” error.

Investigation details

Root Cause

This is a docs/check hygiene failure, not a new lint rule failure: the check job in workflow check-docs exits because repository state changed during make check, indicating committed files are not fully up to date with generators/formatting.

Evidence

• Workflow: https://github.com/elastic/beats/actions/runs/23061260911
• Job/step: check → Run check
• Key log excerpt:
  • Error: some files are not up-to-date. Run 'make update' then review and commit the changes. Modified: [libbeat/tests/integration/cmd_completion_test.go]
  • make[1]: *** [scripts/Makefile:141: check] Error 1

Validation

• Performed log analysis on failed job 66988170536.
• Prior PR Actions Detective comment on this PR (latest: 2026-03-11) reported golangci-lint issues in libbeat/cmd/completion.go; current failure is materially different (check-docs drift in generated/updated file state).

Follow-up

• If make update still leaves drift, run git diff -- libbeat/tests/integration/cmd_completion_test.go to confirm exactly what the generator/formatter wants, commit that delta, and re-run CI.

---

What is this? | From workflow: PR Actions Detective

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

[strawgate]

/test

[strawgate]

/test

[strawgate]

Closing in favour of a restructured set of PRs that minimise the number of codeowner teams per PR, making approval more tractable. Replacements: #49638 #49639 #49640 #49641 #49642 #49643 #49644