NOTE: You are looking at documentation for an older release. For the latest information, see the current release documentation.

« Docker fields Host fields »
Elastic Docs ›Auditbeat Reference [6.8] ›Exported fields

File Integrity fields

edit

File Integrity fields

edit

These are the fields generated by the file_integrity module.

hash fields

edit

Hashes of the file. The keys are algorithm names and the values are the hex encoded digest values.

hash.blake2b_256

type: keyword

BLAKE2b-256 hash of the file.

hash.blake2b_384

type: keyword

BLAKE2b-384 hash of the file.

hash.blake2b_512

type: keyword

BLAKE2b-512 hash of the file.

hash.md5

type: keyword

MD5 hash of the file.

hash.sha1

type: keyword

SHA1 hash of the file.

hash.sha224

type: keyword

SHA224 hash of the file.

hash.sha256

type: keyword

SHA256 hash of the file.

hash.sha384

type: keyword

SHA384 hash of the file.

hash.sha3_224

type: keyword

SHA3_224 hash of the file.

hash.sha3_256

type: keyword

SHA3_256 hash of the file.

hash.sha3_384

type: keyword

SHA3_384 hash of the file.

hash.sha3_512

type: keyword

SHA3_512 hash of the file.

hash.sha512

type: keyword

SHA512 hash of the file.

hash.sha512_224

type: keyword

SHA512/224 hash of the file.

hash.sha512_256

type: keyword

SHA512/256 hash of the file.

hash.xxh64

type: keyword

XX64 hash of the file.

« Docker fields Host fields »