File: auparse_find_field.3

package info (click to toggle)
audit 1:2.4-1
  • links: PTS, VCS
  • area: main
  • in suites: jessie, jessie-backports, jessie-kfreebsd
  • size: 5,308 kB
  • ctags: 5,589
  • sloc: ansic: 47,383; sh: 11,886; python: 1,949; makefile: 824
file content (23 lines) | stat: -rw-r--r-- 742 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
.TH "AUPARSE_FIND_FIELD" "3" "Feb 2007" "Red Hat" "Linux Audit API"
.SH NAME
auparse_find_field \- search for field name
.SH "SYNOPSIS"
.B #include <auparse.h>
.sp
const char *auparse_find_field(auparse_state_t *au, const char *name);

.SH "DESCRIPTION"

auparse_find_field will scan all records in an event to find the first occurance of the field name passed to it. Searching begins from the cursor's current position. The field name is stored for subsequent searching.

.SH "RETURN VALUE"

Returns NULL field not found. If an error occurs errno will be set. Otherwise, it returns a pointer to the text value associated with the field.

.SH "SEE ALSO"

.BR auparse_first_record (3),
.BR auparse_find_field_next (3).

.SH AUTHOR
Steve Grubb