1AUPARSE_NORMALIZE(3)            Linux Audit API           AUPARSE_NORMALIZE(3)
2
3
4

NAME

6       auparse_normalize - normalize the current event
7

SYNOPSIS

9       #include <auparse.h>
10
11       int auparse_normalize(auparse_state_t *au, normalize_option_t opt);
12
13

DESCRIPTION

15       auparse_normalize  analyzes  the  current  event  so that the important
16       information about the event can be accessed through  a  normalized  API
17       which  positions to internal field cursor to the exact record and field
18       when asked about specific information.
19
20       The auparse_normalize function takes an opt argument  to  tell  it  how
21       much information to gather. Legal values are:
22
23            NORM_OPT_ALL - gather maximum information
24            NORM_OPT_NO_ATTRS - do not gather subject/object attribute information
25
26
27

RETURN VALUE

29       Returns 0 on success and 1 on error.
30
31

SEE ALSO

33       auparse_normalize_subject_primary(3),     auparse_normalize_object_pri‐
34       mary(3).
35
36

AUTHOR

38       Steve Grubb
39
40
41
42Red Hat                            Feb 2017               AUPARSE_NORMALIZE(3)
Impressum