AUPARSE_SET_EOE_TIMEOUT(3) Linux Audit API AUPARSE_SET_EOE_TIMEOUT(3)

auparse_set_eoe_timeout - set the end of event timeout value

#include <auparse.h>

int auparse_set_eoe_timeout(time_t new_tmo)

auparse_set_eoe_timeout is used to set the end of event timeout value (seconds). The value should be a positive integer. If this function is called, it overrides any setting in /etc/auditd.conf. The function should be called after the auparse_init() function call.

For details on the timeout, see the end_of_event_timeout configuration item description in auditd.conf(5).

Returns -1 if an error occurs; otherwise, 0 for success.

auparse_init(3). auditd.conf(8).

Steve Grubb

January 2021 Red Hat