Cryptographic functions
The following list contains the functions that you can use to compute the secure hash of string values.
For information about using string and numeric fields in functions, and nesting functions, see Evaluation functions.
md5(str)
Description
This function computes and returns the MD5 hash of a string value.
Usage
You can use this function with the eval
, fieldformat
, and where
commands, and as part of eval expressions.
Basic examples
The following example returns a new field n
with a message-digest (MD5) 128-bit hash value for the phrase "Hello World".
... | eval n=md5("Hello World")
The following example creates a large random string.
| makeresults count=32768
| eval message=md5("". random())
| stats values(message) as message
| eval message = mvjoin(message, "")
- The
makeresults
command creates 32768 results with timestamps. - The
eval
command creates a new field calledmessage
:- The
random
function returns a random numeric field value for each of the 32768 results. The"".
makes the numeric number generated by therandom
function into a string value. - The
md5
function creates a 128-bit hash value from the string value. - The results of the
md5
function are placed into themessage
field created by theeval
command.
- The
- The
stats
command with thevalues
function is used to convert the individual random values into one multivalue result. - The
eval
command with themvjoin
function is used to combine the multivalue entry into a single value.
sha1(str)
Description
This function computes and returns the secure hash of a string value based on the FIPS compliant SHA-1 hash function.
Usage
You can use this function with the eval
, fieldformat
, and where
commands, and as part of eval expressions.
Basic example
... | eval n=sha1("Put that in your | and Splunk it.")
sha256(str)
Description
This function computes and returns the secure hash of a string value based on the FIPS compliant SHA-256 (SHA-2 family) hash function.
Usage
You can use this function with the eval
, fieldformat
, and where
commands, and as part of eval expressions.
Basic example
... | eval n=sha256("Can you SPL?")
sha512(str)
Description
This function computes and returns the secure hash of a string value based on the FIPS compliant SHA-512 (SHA-2 family) hash function.
Usage
You can use this function with the eval
, fieldformat
, and where
commands, and as part of eval expressions.
Basic example
... | eval n=sha512("You bet your sweet SaaS.")
Conversion functions | Date and Time functions |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209, 9.0.2303, 9.0.2305, 9.1.2308, 9.1.2312, 9.2.2403 (latest FedRAMP release), 9.2.2406
Feedback submitted, thanks!