Calculates a secure hash of a field and uses that to match events as a filter. See hashRewrite() on how get hashes into events. Bits must be set to the value applied when the hash was stored in the event.

ParameterTypeRequiredDefaultDescription
bitsnumberfalse256Hash algorithm output bits to keep. Must be a multiple of 8 in the range 8 - 512.
  Minimum8 
  Maximum512 
fieldstringfalse The name of the field to look for an exact match against. If not set then @rawstring is searched for a matching substring.
hashstringfalsesha256Hash algorithm to use for the match
  Valid Valuessha256 
   sha512 
inputstringtrue A constant value to hash and then apply as the search term. [a]
saltstringfalse The name of the secret salt to use.

[a] When you provide only one parameter, the implied parameter is input

Examples

Filter events to only match those that have the value in the ssn field equal to the hash of 12345678

logscale
ssn =~ hashMatch("12345678", salt="salt1")

Filter events to only match those that have the value of the hash of 12345678 somewhere in @rawstring

logscale
hashMatch("12345678", salt="salt1")