IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« ECS fields Host fields »
Elastic Docs ›Auditbeat Reference [8.2] ›Exported fields

File Integrity fields

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

File Integrity fields

edit

These are the fields generated by the file_integrity module.

hash

edit

Hashes of the file. The keys are algorithm names and the values are the hex encoded digest values.

hash.blake2b_256

BLAKE2b-256 hash of the file.

type: keyword

hash.blake2b_384

BLAKE2b-384 hash of the file.

type: keyword

hash.blake2b_512

BLAKE2b-512 hash of the file.

type: keyword

hash.md5

MD5 hash of the file.

type: keyword

hash.sha1

SHA1 hash of the file.

type: keyword

hash.sha224

SHA224 hash of the file.

type: keyword

hash.sha256

SHA256 hash of the file.

type: keyword

hash.sha384

SHA384 hash of the file.

type: keyword

hash.sha3_224

SHA3_224 hash of the file.

type: keyword

hash.sha3_256

SHA3_256 hash of the file.

type: keyword

hash.sha3_384

SHA3_384 hash of the file.

type: keyword

hash.sha3_512

SHA3_512 hash of the file.

type: keyword

hash.sha512

SHA512 hash of the file.

type: keyword

hash.sha512_224

SHA512/224 hash of the file.

type: keyword

hash.sha512_256

SHA512/256 hash of the file.

type: keyword

hash.xxh64

XX64 hash of the file.

type: keyword

« ECS fields Host fields »