Scroll to navigation

AUPARSE_FIND_FIELD(3) Linux Audit API AUPARSE_FIND_FIELD(3)

NAME

auparse_find_field - search for field name

SYNOPSIS

#include <auparse.h>

const char *auparse_find_field(auparse_state_t *au, const char *name);

DESCRIPTION

auparse_find_field will scan all records in an event to find the first occurrence of the field name passed to it. Searching begins from the cursor's current position. The field name is stored for subsequent searching.

RETURN VALUE

Returns NULL field not found. If an error occurs errno will be set. Otherwise, it returns a pointer to the text value associated with the field.

SEE ALSO

auparse_first_record(3), auparse_find_field_next(3).

AUTHOR

Steve Grubb

Feb 2007 Red Hat