DOKK / manpages / debian 10 / libauparse-dev / auparse_first_field.3.en
AUPARSE_FIRST_FIELD(3) Linux Audit API AUPARSE_FIRST_FIELD(3)

auparse_first_field - reposition field cursor

#include <auparse.h>

int auparse_first_field(auparse_state_t *au);

auparse_first_field repositions the library's internal cursor to point to the first field of the current record in the current event.

Returns 0 if there is no event data; otherwise, 1 for success.

auparse_next_field(3).

Steve Grubb

Feb 2007 Red Hat