diff --git a/generated/ecs/ecs_flat.yml b/generated/ecs/ecs_flat.yml
index 5f6aa7025b..0bb5e5325f 100644
--- a/generated/ecs/ecs_flat.yml
+++ b/generated/ecs/ecs_flat.yml
@@ -2005,6 +2005,7 @@ event.kind:
   type: keyword
 event.module:
   dashed_name: event-module
+  deprecated: true
   description: 'Name of the module this data is coming from.
 
     If your monitoring agent supports the concept of modules or plugins to process
diff --git a/generated/ecs/ecs_nested.yml b/generated/ecs/ecs_nested.yml
index 14cc581f24..80e0833db7 100644
--- a/generated/ecs/ecs_nested.yml
+++ b/generated/ecs/ecs_nested.yml
@@ -2359,6 +2359,7 @@ event:
       type: keyword
     module:
       dashed_name: event-module
+      deprecated: true
       description: 'Name of the module this data is coming from.
 
         If your monitoring agent supports the concept of modules or plugins to process
diff --git a/schemas/event.yml b/schemas/event.yml
index 204adb3e7b..17a1b8486c 100644
--- a/schemas/event.yml
+++ b/schemas/event.yml
@@ -499,6 +499,7 @@
         process events of a given source (e.g. Apache logs),
         `event.module` should contain the name of this module.
       example: apache
+      deprecated: true
 
     - name: dataset
       level: core