AUPARSE_GET_NODE(3)

💖 AUPARSE_GET_NODE 💖

ok so bestie, welcome to AUPARSE_GET_NODE(3) — yes that's the man page name, that's the section number (3, we're in library land), and it lives under the Linux Audit API umbrella. she's a little function, she's a specific girl, and she does exactly one thing. let's get into it 🫶

---

✨ NAME ✨

auparse_get_node — grab the event's machine node name 🏷️

---

🌸 SYNOPSIS 🌸

#include <auparse.h>

const char * auparse_get_node(const auparse_state_t *au);

ok yes there's a stray " at the end of that signature in the original and I am not touching it, that's canon, that's the lore 💀

---

🦋 DESCRIPTION 🦋

so like. auparse_get_node gets the machine's node name — but only if it exists in the audit event, and it pulls it straight out of the current event's timestamp data structure. ✨

here's the tea tho: not all records have node names, because it's an admin-configurable option. so if your admin didn't set it, it's just not there. no node name, no vibes, nothing. don't come for the function, it's literally not her fault 🙈

---

👑 RETURN VALUE 👑

she returns a copy of the node name 💅 — or NULL if it doesn't exist, or if there was an error.

⚠️ bestie listen CLOSELY: the caller must free the string. that's on you. that copy is yours now, you own it, you clean it up. no leaks in this group chat 🚫💧

---

🔥 SEE ALSO 🔥

• auparse_get_timestamp(3)
• auparse_get_time(3)
• auparse_get_milli(3)
• auparse_get_serial(3)

the whole timestamp bestie squad fr fr 🎀

---

🌈 AUTHOR 🌈

Steve Grubb — the icon, the moment, the main character 🫶

---

and that's the whole page!! brought to you by Red Hat, dated Sept 2007 — yes she's been iconic since 2007, longevity queen ⭐ mwah, go free your strings 💜