DOKK / manpages / debian 12 / libauparse-dev / auparse_next_record.3.en
AUPARSE_NEXT_RECORD(3) Linux Audit API AUPARSE_NEXT_RECORD(3)

auparse_next_record - move record cursor

#include <auparse.h>

int auparse_next_record(auparse_state_t *au);

auparse_next_record will move the internal library cursors to point to the next record of the current event. You should not call this function from a feed interface callback function. Doing so will deadlock the code. In that scenario, you should check the number of records in the current event with auparse_get_num_records and only call this if there are more records.

Returns -1 if an error occurs, 0 if no more records in current event, or 1 for success.

auparse_next_event(3),auparse_get_num_records(3).

Steve Grubb

Feb 2007 Red Hat