AUPARSE_GET_FIELD_STR(3)

💖 AUPARSE_GET_FIELD_STR 💖

okay bestie, so this one is a <pink>Linux Audit API</pink> page, section 3 of the manual — it's a library call, not a command you run in your shell, iykyk 🫶

---

✨ NAME ✨

auparse_get_field_str — grab the value of the field you're currently sitting on 🌸

---

🎀 SYNOPSIS 🎀

#include <auparse.h>

const char * auparse_get_field_str(const auparse_state_t *au);"

yes the stray " at the end is literally in the original, we don't fix it, we don't touch it, it's part of the vibe 💅 (character for character, no cap)

---

🦋 DESCRIPTION 🦋

so basically: auparse_get_field_str is your little key to the value living inside the current field — and that field belongs to the current record, which is chillin' inside the current event. it's giving very much "you are here, and here is the value" energy. ✨

like, the whole nesting situation is: event → record → field → value. and this function hands you the value at the bottom of that stack. iconic. 👑

---

💜 RETURN VALUE 💜

• if something goes wrong: it returns NULL 😭
• otherwise: a pointer to the field's value 🎉

bestie, NULL means error. always check. do not skip the vibe check. 🙈

---

🌈 SEE ALSO 🌈

• auparse_get_field_name(3)
• auparse_get_field_int(3)
• auparse_interpret_field(3)
• auparse_next_field(3)

---

🌸 AUTHOR 🌸

Steve Grubb 🫶

---

Red Hat came through with this one back in Feb 2007, and yeah — that's the source, the version, and the date, all wrapped up in a cute little sign-off. slay. 💅✨🎀