1AUPARSE_FIND_FIELD(3) Linux Audit API AUPARSE_FIND_FIELD(3)
2
3
4
6 auparse_find_field - search for field name
7
9 #include <auparse.h>
10
11 const char *auparse_find_field(auparse_state_t *au, const char *name);
12
13
15 auparse_find_field will scan all records in an event to find the first
16 occurrence of the field name passed to it. Searching begins from the
17 cursor's current position. The field name is stored for subsequent
18 searching.
19
20
22 Returns NULL field not found. If an error occurs errno will be set.
23 Otherwise, it returns a pointer to the text value associated with the
24 field.
25
26
28 auparse_first_record(3), auparse_find_field_next(3).
29
30
32 Steve Grubb
33
34
35
36Red Hat Feb 2007 AUPARSE_FIND_FIELD(3)