AUPARSE_FIRST_RECORD(3) Linux Audit API AUPARSE_FIRST_RECORD(3)

auparse_first_record - reposition record cursor

#include <auparse.h>

int auparse_first_record(auparse_state_t *au);

auparse_first_record repositions the internal cursors of the parsing library to point to the first field of the first record in the current event.

Returns -1 if an error occurs, 0 if there is no event data, or 1 for success.

auparse_next_event(3), auparse_next_record(3).

Steve Grubb

Sep 2014 Red Hat