📦 libauparse-dev

A

• auparse_add_callback(3)add a callback handler for notifications✨
• auparse_destroy(3)release instance of parser✨
• auparse_feed(3)feed data into parser✨
• auparse_feed_age_events(3)check events for complete based on time.✨
• auparse_feed_has_data(3)check if there is any data accumulating that might need flushing.✨
• auparse_find_field(3)search for field name✨
• auparse_find_field_next(3)find next occurrence of field name✨
• auparse_first_field(3)reposition field cursor✨
• auparse_first_record(3)reposition record cursor✨
• auparse_flush_feed(3)flush any unconsumed feed data through parser.✨
• auparse_get_field_int(3)get current field's value as an int✨
• auparse_get_field_name(3)get current field's name✨
• auparse_get_field_num(3)get current field cursor location✨
• auparse_get_field_str(3)get current field's value✨
• auparse_get_field_type(3)get current field's data type✨
• auparse_get_filename(3)get the filename where record was found✨
• auparse_get_line_number(3)get line number where record was found✨
• auparse_get_milli(3)get the millisecond value of the event✨
• auparse_get_node(3)get the event's machine node name✨
• auparse_get_num_fields(3)get the number of fields✨
• auparse_get_num_records(3)get the number of records✨
• auparse_get_record_num(3)get current record cursor location✨
• auparse_get_record_text(3)access unparsed record data✨
• auparse_get_serial(3)get the event's serial number✨
• auparse_get_time(3)get event's time✨
• auparse_get_timestamp(3)access timestamp of the event✨
• auparse_get_type(3)get record's type✨
• auparse_get_type_name(3)get record's type translation✨
• auparse_goto_field_num(3)move field cursor to specific field✨
• auparse_goto_record_num(3)move record cursor to specific record✨
• auparse_init(3)initialize an instance of the audit parsing library✨
• auparse_interpret_field(3)get current field's interpreted value✨
• auparse_metrics(3)get some metrics about auparse✨
• auparse_new_buffer(3)replace the buffer in the parser✨
• auparse_next_event(3)get the next event✨
• auparse_next_field(3)move field cursor✨
• auparse_next_record(3)move record cursor✨
• auparse_node_compare(3)compares node name values✨
• auparse_normalize(3)normalize the current event✨
• auparse_normalize_functions(3)Access normalized fields✨
• auparse_reset(3)reset audit parser instance✨
• auparse_set_eoe_timeout(3)set the end of event timeout value✨
• auparse_set_escape_mode(3)choose escape method✨
• auparse_timestamp_compare(3)compares timestamp values✨
• ausearch_add_expression(3)build up search expression✨
• ausearch_add_interpreted_item(3)build up search rule✨
• ausearch_add_item(3)build up search rule✨
• ausearch_add_regex(3)use regular expression search rule✨
• ausearch_add_timestamp_item(3)build up search rule✨
• ausearch_add_timestamp_item_ex(3)build up search rule✨
• ausearch_clear(3)clear search parameters✨
• ausearch_cur_event(3)check if the current event meets search criteria✨
• ausearch_next_event(3)find the next event that meets search criteria✨
• ausearch_set_stop(3)set the cursor position✨