AUPARSE_GET_RECORD_TEXT(3)

πŸ“¦
version 4.2.1 Β· 3 versions
, in alpine 3.23, alpine 3.24, arch rolling, centos-stream 10, fedora 43, fedora 44, nixpkgs unstable, ubuntu resolute, ubuntu stonking

πŸ’– auparse_get_record_text(3) β€” the Linux Audit API glow-up πŸ’–

okay bestie, welcome to auparse_get_record_text, a certified little legend from the Linux Audit API (manual section 3, the library-call girlies ✨). she's small, she's simple, and she does exactly one thing. and she ate. πŸ’…


🌸 NAME 🌸

auparse_get_record_text β€” access unparsed record data πŸŽ€


πŸ¦‹ SYNOPSIS πŸ¦‹

#include <auparse.h>

const char * auparse_get_record_text(const auparse_state_t *au);"
no cap, that's the whole vibe right there β€” one include, one function, zero drama πŸ™ˆ

✨ DESCRIPTION ✨

okay so here's the tea β˜• β€” auparse_get_record_text hands you back a pointer to the full unparsed record. like, the raw, un-glammed, pre-glow-up version of the record. the whole thing. untouched. main character energy in its purest form 🌈

she does not parse it for you, she does not filter it, she does not do your homework. she just points at the record and goes "here bestie, it's all yours πŸ’–".


πŸ‘‘ RETURN VALUE πŸ‘‘

  • if something goes wrong: you get NULL 😭
  • otherwise: a pointer to the record 🫢

that's it. that's the whole return-value section. short king behavior fr fr.


πŸ”₯ SEE ALSO πŸ”₯


πŸŽ€ AUTHOR πŸŽ€

Steve Grubb β€” the icon, the moment, the blueprint πŸ‘‘


lowkey reminder: this page is part of the Linux Audit API, so if you're poking at audit records and you need the raw text before anything gets dissected, she's your girl. iykyk πŸ’…

and that's the whole page, bestie!! ✨ this lil masterpiece comes courtesy of Red Hat, dated Feb 2007 (yes she's been iconic since 2007, the longevity!! πŸ¦‹), from manual section 3 of the Linux Audit API. drink some water, run your audit tools responsibly, and stan unparsed data responsibly too πŸ“πŸ§šπŸ’–