AUPARSE_GET_FIELD_TYPE(3)

💖 NAME 💖

auparse_get_field_type — bestie, it tells you what kind of data is sitting in the field you're looking at right now ✨

🌸 SYNOPSIS 🌸

#include <auparse.h>

int auparse_get_field_type(const auparse_state_t *au);"

🦋 DESCRIPTION 🦋

okay so picture this: you're deep in an audit event, you've got a current event, that event has a current record, and that record has a current field. Very main character of it.

auparse_get_field_type hands you back a value from the auparse_type_t enum, and that value describes the kind of data living in that current field. That's it, that's the whole vibe check 👑

🎀 RETURN VALUE 🎀

It returns AUPARSE_TYPE_UNCLASSIFIED when the field's data type has no known description — or when it's an integer. Otherwise it returns another enum, no cap.

⚠️ heads up bestie: fields with the type AUPARSE_TYPE_ESCAPED must be interpreted to actually access their value, because those fields' raw value is encoded. Do not just read it raw, I am begging 😭

🌈 SEE ALSO 🌈

• auparse_get_field_name(3) — the sibling, the duo, the iconic pair 🫶

💅 AUTHOR 💅

Steve Grubb — the legend himself 👑

Red Hat · Sept 2008 — yeah she's been serving since 2008 and still ate 💖✨ periodt 🌸🦋