1AUSEARCH_SET_STOP(3)            Linux Audit API           AUSEARCH_SET_STOP(3)
2
3
4

NAME

6        ausearch_set_stop - set the cursor position
7

SYNOPSIS

9       #include <auparse.h>
10
11       int ausearch_set_stop(auparse_state_t *au, austop_t where);
12
13

DESCRIPTION

15       ausearch_set_stop determines where the internal cursor will stop when a
16       search condition is met. The possible values are:
17
18
19              AUSEARCH_STOP_EVENT
20                     This one repositions the cursors to the  first  field  of
21                     the  first  record  of  the  event  containing  the items
22                     searched for.
23
24              AUSEARCH_STOP_RECORD
25                     This one repositions the cursors to the  first  field  of
26                     the record containing the items searched for.
27
28              AUSEARCH_STOP_FIELD
29                     This one simply stops on the current field when the eval‐
30                     uation of the rules becomes true.
31
32

RETURN VALUE

34       Returns -1 if an error occurs; otherwise, 0 for success.
35
36

SEE ALSO

38       ausearch_add_item(3), ausearch_add_regex(3),  ausearch_clear(3),  ause‐
39       arch_next_event(3).
40
41

AUTHOR

43       Steve Grubb
44
45
46
47Red Hat                            Feb 2007               AUSEARCH_SET_STOP(3)