DOKK / manpages / debian 12 / libauparse-dev / ausearch_set_stop.3.en
AUSEARCH_SET_STOP(3) Linux Audit API AUSEARCH_SET_STOP(3)


ausearch_set_stop - set the cursor position

#include <auparse.h>

int ausearch_set_stop(auparse_state_t *au, austop_t where);

ausearch_set_stop determines where the internal cursor will stop when a search condition is met. The possible values are:

This one repositions the cursors to the first field of the first record of the event containing the items searched for.
This one repositions the cursors to the first field of the record containing the items searched for.
This one simply stops on the current field when the evaluation of the rules becomes true.

Returns -1 if an error occurs; otherwise, 0 for success.

ausearch_add_item(3), ausearch_add_regex(3), ausearch_clear(3), ausearch_next_event(3).

Steve Grubb

Feb 2007 Red Hat