This query function computes a cryptographic MD5-hashing of an input
string of one field or an array of fields. The hashed output is returned
as a hex
string, meaning the hexadecimal
representation of the MD5 hash of data.
This function can be used to calculate checksums to compare outside of LogScale or collect multiple fields into a combined string of fixed length.
Function Traits: Transformation
Parameter | Type | Required | Default | Description |
---|---|---|---|---|
as | string | optional | The name of the output field. | |
as | Array of strings | required | The name of the field or fields to hash. |
crypto:md5()
hashes the UTF-8 encoding of the fields.
When providing more than one field:
the function hashes the concatenation of the fields
if a given field is missing from an event — or if it has an empty value — it is treated as the empty string.
crypto:md5()
Examples
Hash a field with a given value
a:= "Hello, world!"
| crypto:md5(a)
Hash the field a with
value Hello, world!
and
convert the result into
_md5
:
Starting with the source repository events
- flowchart LR; repo{{Events}} 0[/Filter/] 1[/Filter/] result{{Result Set}} repo --> 0 0 --> 1 1 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;
Find all fields equal to
Hello, world!
logscalea:= "Hello, world!"
- flowchart LR; repo{{Events}} 0[/Filter/] 1[/Filter/] result{{Result Set}} repo --> 0 0 --> 1 1 --> result style 1 fill:#ff0000,stroke-width:4px,stroke:#000;
Performs a cryptographic MD5-hashing of a:= "Hello, world!".
logscale| crypto:md5(a)
Event Result set
The output value would be _md5 =
"6cd3556deb0da54bca060b4c39479839"
Hash multiple fields
crypto:md5(field=[a,b,c])
Hash the fields a,b,c and
put the result into _md5
:
Starting with the source repository events
- flowchart LR; repo{{Events}} 0[/Filter/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;
Performs a cryptographic MD5-hashing of a,b,c. The
field
argument can be omitted to write:crypto:md5(a)
logscalecrypto:md5(field=[a,b,c])
Event Result set