WARNING: Version 6.2 of Auditbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

› ›

File Integrity fields

edit

File Integrity fields

edit

These are the fields generated by the file_integrity module.

hash fields

edit

Hashes of the file. The keys are algorithm names and the values are the hex encoded digest values.

`hash.blake2b_256`

edit

type: keyword

BLAKE2b-256 hash of the file.

`hash.blake2b_384`

edit

type: keyword

BLAKE2b-384 hash of the file.

`hash.blake2b_512`

edit

type: keyword

BLAKE2b-512 hash of the file.

`hash.md5`

edit

type: keyword

MD5 hash of the file.

`hash.sha1`

edit

type: keyword

SHA1 hash of the file.

`hash.sha224`

edit

type: keyword

SHA224 hash of the file.

`hash.sha256`

edit

type: keyword

SHA256 hash of the file.

`hash.sha384`

edit

type: keyword

SHA384 hash of the file.

`hash.sha3_224`

edit

type: keyword

SHA3_224 hash of the file.

`hash.sha3_256`

edit

type: keyword

SHA3_256 hash of the file.

`hash.sha3_384`

edit

type: keyword

SHA3_384 hash of the file.

`hash.sha3_512`

edit

type: keyword

SHA3_512 hash of the file.

`hash.sha512`

edit

type: keyword

SHA512 hash of the file.

`hash.sha512_224`

edit

type: keyword

SHA512/224 hash of the file.

`hash.sha512_256`

edit

type: keyword

SHA512/256 hash of the file.

« Docker fields Kubernetes fields »