fix typo

docs/fields/field-values.asciidoc

@@ -68,7 +68,7 @@ beta:[ This event categorization value is beta and subject to change. ]
 
 This value indicates events whose primary purpose is to store an inventory of assets/entities and their attributes. Assets/entities are objects (such as users and hosts) that are expected to be subjects of detailed analysis within the system.
 
-Examples include lists of user identities or accounts ingested from directory services such as Active Directory (AD), inventory of hosts pulled from configuration management databases (CMDB), and lists of cloud storage buckets pulled from cloud provider API's.
+Examples include lists of user identities or accounts ingested from directory services such as Active Directory (AD), inventory of hosts pulled from configuration management databases (CMDB), and lists of cloud storage buckets pulled from cloud provider APIs.
 
 This value is used by Elastic Security for asset management solutions. `event.kind: asset` is not used for normal system events or logs that are coming from an asset/entity, nor is it used for system events or logs coming from a directory or CMDB system.
 

experimental/generated/ecs/ecs_flat.yml

@@ -3314,7 +3314,7 @@ event.kind:
       Examples include lists of user identities or accounts ingested from directory
       services such as Active Directory (AD), inventory of hosts pulled from configuration
       management databases (CMDB), and lists of cloud storage buckets pulled from
-      cloud provider API''s.
+      cloud provider APIs.
 
       This value is used by Elastic Security for asset management solutions. `event.kind:
       asset` is not used for normal system events or logs that are coming from an

experimental/generated/ecs/ecs_nested.yml

@@ -4311,7 +4311,7 @@ event:
           Examples include lists of user identities or accounts ingested from directory
           services such as Active Directory (AD), inventory of hosts pulled from configuration
           management databases (CMDB), and lists of cloud storage buckets pulled from
-          cloud provider API''s.
+          cloud provider APIs.
 
           This value is used by Elastic Security for asset management solutions. `event.kind:
           asset` is not used for normal system events or logs that are coming from

generated/ecs/ecs_flat.yml

@@ -3245,7 +3245,7 @@ event.kind:
       Examples include lists of user identities or accounts ingested from directory
       services such as Active Directory (AD), inventory of hosts pulled from configuration
       management databases (CMDB), and lists of cloud storage buckets pulled from
-      cloud provider API''s.
+      cloud provider APIs.
 
       This value is used by Elastic Security for asset management solutions. `event.kind:
       asset` is not used for normal system events or logs that are coming from an

generated/ecs/ecs_nested.yml

@@ -4231,7 +4231,7 @@ event:
           Examples include lists of user identities or accounts ingested from directory
           services such as Active Directory (AD), inventory of hosts pulled from configuration
           management databases (CMDB), and lists of cloud storage buckets pulled from
-          cloud provider API''s.
+          cloud provider APIs.
 
           This value is used by Elastic Security for asset management solutions. `event.kind:
           asset` is not used for normal system events or logs that are coming from

schemas/event.yml

@@ -93,7 +93,7 @@
             Examples include lists of user identities or accounts ingested from directory
             services such as Active Directory (AD), inventory of hosts pulled from
             configuration management databases (CMDB), and lists of cloud storage buckets
-            pulled from cloud provider API's.
+            pulled from cloud provider APIs.
 
             This value is used by Elastic Security for asset management solutions.
             `event.kind: asset` is not used for normal system events or logs that are coming