1AUDIT_SET_BACKLOG_WAIT_TIME(L3i)brary Functions ManuAaUlDIT_SET_BACKLOG_WAIT_TIME(3)
2
3
4
6 audit_set_backlog_wait_time - Set the audit backlog wait time
7
9 #include <libaudit.h>
10
11 int audit_set_backlog_wait_time(int fd, uint32_t bwt);
12
13
15 audit_set_backlog_wait_time sets the time that the kernel will wait be‐
16 fore attempting to send more audit events to be transferred to the au‐
17 dit daemon when the backlog_limit is reached. This gives the audit dae‐
18 mon a chance to drain the kernel queue. The default value is 60000 or
19 60 * HZ setting in the kernel.
20
21
23 The return value is <= 0 on error, otherwise it is the netlink sequence
24 id number. This function can have any error that sendto would en‐
25 counter.
26
27
29 audit_set_backlog_limit(3), audit_open(3), auditd(8), auditctl(8).
30
31
33 Steve Grubb
34
35
36
37Linux Audit API Oct 2014 AUDIT_SET_BACKLOG_WAIT_TIME(3)