1AUPARSE_NORMALIZE(3) Linux Audit API AUPARSE_NORMALIZE(3)
2
3
4
6 auparse_normalize - normalize the current event
7
9 #include <auparse.h>
10
11 int auparse_normalize(auparse_state_t *au, normalize_option_t opt);
12
13
15 auparse_normalize analyzes the current event so that the important
16 information about the event can be accessed through a normalized API
17 which positions to internal field cursor to the exact record and field
18 when asked about specific information.
19
20 The auparse_normalize function takes an opt argument to tell it how
21 much information to gather. Legal values are:
22
23 NORM_OPT_ALL - gather maximum information
24 NORM_OPT_NO_ATTRS - do not gather subject/object attribute information
25
26
27
29 Returns 0 on success and 1 on error.
30
31
33
34
35
37 Steve Grubb
38
39
40
41Red Hat Feb 2017 AUPARSE_NORMALIZE(3)