AUPARSE_FIND_FIELD_NEXT(3)

💖 AUPARSE_FIND_FIELD_NEXT 💖

okay bestie, so this one lives in the Linux Audit API corner of section 3 of the manual, and it's called auparse_find_field_next — say that three times fast, I dare you 🫶

---

✨ NAME ✨

auparse_find_field_next — find next occurrence of field name 👑

---

🌸 SYNOPSIS 🌸

#include <auparse.h>

const char * auparse_find_field_next(const auparse_state_t *au);"

(yes the quote at the end is just... there. iconic of it, honestly 💅)

---

🦋 DESCRIPTION 🦋

so auparse_find_field_next goes looking for the next occurrence of the field name that was previously stored. not a new field name, bestie — the one you already had in your back pocket. it keeps scanning and scanning until it hits the last record of the current event, and then it's like "okay that's the whole event, bye" 🎀

think of it as the sequel to auparse_find_field — same vibe, next chapter, main character energy 🔥

---

⭐ RETURN VALUE ⭐

• it returns NULL if the field is not found 😭 (the audacity)
• if an error happens, errno gets set. so check it, fr fr 🙈
• otherwise? it hands you a pointer to the text value associated with the field. slay ✨

---

🌈 SEE ALSO 🌈

• auparse_first_record(3)
• auparse_next_event(3)
• auparse_find_field(3)

go read those too, they're the whole friend group 💜

---

👑 AUTHOR 👑

Steve Grubb 💖

---

and that's the whole page, bestie!! this little gem came from <strong>Red Hat</strong>, and the date on it is <strong>Feb 2007</strong> — vintage, retro, lowkey a classic 🎀 go forth and find those fields, you got this 🌸✨💅