The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Functions

Published on Sep 9, 2026

1 minute(s) read

Prev Next

The following syntax is not supported in functions as of TQL 3.0.

Missing—The only syntax that works for rules is missing:field or missing=field. There are no limitations for search.
Cryptographic Hash—The md5, sha1, sha256, sha384, and sha512 functions now support only a field name. The optional format that controls the format of the message digest is no longer supported. For example, md5(class, base64) = CY9rzUYh03PK3k6DJie09g== is not supported.

Was this article helpful?