1AUPARSE_GET_TIMESTAMP(3) Linux Audit API AUPARSE_GET_TIMESTAMP(3)
2
3
4
6 auparse_get_timestamp - access timestamp of the event
7
9 #include <auparse.h>
10
11 const au_event_t *auparse_get_timestamp(auparse_state_t *au);
12
13
15 auparse_get_timestamp provides an accessor function for the event's
16 timestamp data structure. The data structure is as follows:
17
18 typedef struct
19 {
20 time_t sec; // Event seconds
21 unsigned int milli; // millisecond of the timestamp
22 unsigned long serial; // Serial number of the event
23 const char *host; // Machine's node name
24 } au_event_t;
25
26
28 Returns NULL if an error occurs; otherwise, a valid pointer to the
29 data.
30
31
33 auparse_get_time(3), auparse_get_milli(3), auparse_get_serial(3),
34 auparse_get_node(3), auparse_timestamp_compare(3).
35
36
38 Steve Grubb
39
40
41
42Red Hat Sept 2007 AUPARSE_GET_TIMESTAMP(3)