AUPARSE_SET_EOE_TIMEOUT(3)

💖 NAME 💖

auparse_set_eoe_timeout — bestie, this is the one that sets the end of event timeout value ✨

---

🎀 SYNOPSIS 🎀

#include <auparse.h>

int auparse_set_eoe_timeout(time_tnew_tmo);"

(yes the trailing " is literally in there, i am not the one who did that, i just report the facts 💀)

---

🌸 DESCRIPTION 🌸

okay so. auparse_set_eoe_timeout is the little function you call when you wanna set the end of event timeout value, and that value is measured in seconds. no cap.

the value should be a positive integer. periodt. if you call this function, it overrides any setting you've got chilling in /etc/auditd.conf — like, this function wins, the config file does not get a say, it's giving main character energy fr fr.

🫶 important sequencing note bestie: this function should be called after the auparse_init() function call. do it in the wrong order and it's not gonna go how you want it to.

for all the deets on the timeout itself, go look at the end_of_event_timeout configuration item description over in auditd.conf(5) 👑

---

✨ RETURN VALUE ✨

• -1 — bestie something went wrong 😭 error vibes
• 0 — slay, success 💅

---

🦋 SEE ALSO 🦋

• auparse_init(3)
• auditd.conf(8)

---

👑 AUTHOR 👑

Steve Grubb — we stan 🌟

---

written by Red Hat, dated January 2021, and this lil cutie lives in the Linux Audit API corner of the manual universe 🧚 mwah, bye bestie 💖✨