diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
index ea18bba43f64..512c7123cc52 100644
--- a/filebeat/docs/fields.asciidoc
+++ b/filebeat/docs/fields.asciidoc
@@ -12007,7 +12007,7 @@ alias to: user.name
 *`system.auth.ssh.action`*::
 +
 --
-The SSH action. Can be one of "Accepted" or "Failed".
+The SSH action. Can be one of "Accepted", "Failed", "Invalid".
 
 
 --
diff --git a/filebeat/module/system/auth/_meta/fields.yml b/filebeat/module/system/auth/_meta/fields.yml
index ef9591075099..41a85fc181a1 100644
--- a/filebeat/module/system/auth/_meta/fields.yml
+++ b/filebeat/module/system/auth/_meta/fields.yml
@@ -33,7 +33,7 @@
       fields:
       - name: action
         description: >
-          The SSH action. Can be one of "Accepted" or "Failed".
+          The SSH action. Can be one of "Accepted", "Failed", "Invalid".
       - name: method
         description: >
           The SSH authentication method. Can be one of "password" or "publickey".
diff --git a/filebeat/module/system/fields.go b/filebeat/module/system/fields.go
index bcbce7469233..06a0d7c08ef0 100644
--- a/filebeat/module/system/fields.go
+++ b/filebeat/module/system/fields.go
@@ -31,5 +31,5 @@ func init() {
 
 // Asset returns asset data
 func Asset() string {
-	return "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"
+	return "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"
 }