diff --git a/filebeat/docs/modules/tomcat.asciidoc b/filebeat/docs/modules/tomcat.asciidoc
index ed79fdf78e08..a6387f5e28f6 100644
--- a/filebeat/docs/modules/tomcat.asciidoc
+++ b/filebeat/docs/modules/tomcat.asciidoc
@@ -33,6 +33,10 @@ NOTE: This was converted from RSA NetWitness log parser XML "apachetomcat" devic
 
 The input from which messages are read. One of `file`, `tcp` or `udp`.
 
+*`var.paths`*::
+
+The paths from which files are read. Needs to be a list. Only works when `var.input` is set to `file`.
+
 *`var.syslog_host`*::
 
 The address to listen to UDP or TCP based syslog traffic.
diff --git a/x-pack/filebeat/filebeat.reference.yml b/x-pack/filebeat/filebeat.reference.yml
index 4f638320f1aa..d042f5c903dc 100644
--- a/x-pack/filebeat/filebeat.reference.yml
+++ b/x-pack/filebeat/filebeat.reference.yml
@@ -2318,6 +2318,7 @@ filebeat.modules:
 
     # Set paths for the log files when file input is used.
     # var.paths:
+    #   - /var/log/tomcat/*.log
 
     # Toggle output of non-ECS fields (default true).
     # var.rsa_fields: true
diff --git a/x-pack/filebeat/module/tomcat/_meta/config.yml b/x-pack/filebeat/module/tomcat/_meta/config.yml
index 25592f0ad30e..e3640165f610 100644
--- a/x-pack/filebeat/module/tomcat/_meta/config.yml
+++ b/x-pack/filebeat/module/tomcat/_meta/config.yml
@@ -9,6 +9,7 @@
 
     # Set paths for the log files when file input is used.
     # var.paths:
+    #   - /var/log/tomcat/*.log
 
     # Toggle output of non-ECS fields (default true).
     # var.rsa_fields: true
diff --git a/x-pack/filebeat/module/tomcat/_meta/docs.asciidoc b/x-pack/filebeat/module/tomcat/_meta/docs.asciidoc
index dad025f1dafc..66c983bb7dbf 100644
--- a/x-pack/filebeat/module/tomcat/_meta/docs.asciidoc
+++ b/x-pack/filebeat/module/tomcat/_meta/docs.asciidoc
@@ -28,6 +28,10 @@ NOTE: This was converted from RSA NetWitness log parser XML "apachetomcat" devic
 
 The input from which messages are read. One of `file`, `tcp` or `udp`.
 
+*`var.paths`*::
+
+The paths from which files are read. Needs to be a list. Only works when `var.input` is set to `file`.
+
 *`var.syslog_host`*::
 
 The address to listen to UDP or TCP based syslog traffic.
diff --git a/x-pack/filebeat/modules.d/tomcat.yml.disabled b/x-pack/filebeat/modules.d/tomcat.yml.disabled
index 84f4619d5b56..9394d7708048 100644
--- a/x-pack/filebeat/modules.d/tomcat.yml.disabled
+++ b/x-pack/filebeat/modules.d/tomcat.yml.disabled
@@ -12,6 +12,7 @@
 
     # Set paths for the log files when file input is used.
     # var.paths:
+    #   - /var/log/tomcat/*.log
 
     # Toggle output of non-ECS fields (default true).
     # var.rsa_fields: true