DOKK / manpages / debian 10 / libauparse-dev / auparse_get_field_str.3.en
AUPARSE_GET_FIELD_STR(3) Linux Audit API AUPARSE_GET_FIELD_STR(3)

auparse_get_field_str - get current field's value

#include <auparse.h>

const char *auparse_get_field_str(auparse_state_t *au);

auparse_get_field_str allows access to the value in the current field of the current record in the current event.

Returns NULL if an error occurs; otherwise, a pointer to the field's value.

auparse_get_field_name(3), auparse_get_field_int(3), auparse_interpret_field(3), auparse_next_field(3).

Steve Grubb

Feb 2007 Red Hat