AUPARSE_GET_FIELD_NAME(3)

AUPARSE_GET_FIELD_NAME(3) 💅

okay bestie, welcome to the Linux Audit API section 3 girlies — this one's short and sweet and honestly kind of a bop ✨

---

🌸 NAME 🌸

auparse_get_field_name — get current field's name

---

🎀 SYNOPSIS 🎀

#include <auparse.h>

const char * auparse_get_field_name(const auparse_state_t *au);"

(yes the quote mark at the end is just... there. we don't ask questions, we just copy the vibe 💀)

---

✨ DESCRIPTION ✨

so like, auparse_get_field_name lets you peek at the current field name — and not just any field, bestie, we're talking the current field of the current record in the current event. it's giving very "where am I right now in the audit stream" main character energy 👑

---

🦋 RETURN VALUE 🦋

• if something goes wrong, you get NULL back 😭
• otherwise? a pointer to the field's name, slay 💖

---

🌈 SEE ALSO 🌈

• auparse_get_field_str(3)
• auparse_interpret_field(3)
• auparse_next_field(3)

---

👑 AUTHOR 👑

Steve Grubb

---

Red Hat, Feb 2007 — that's the whole page, no cap. thanks for coming to my ted talk, go parse some audits 🫶💜