AUPARSE_GET_FIELD_TYPE(3) Linux Audit API AUPARSE_GET_FIELD_TYPE(3)

NAME auparse_get_field_type - get current fields data type

SYNOPSIS #include <auparse.h>

int auparse_get_field_type(auparse_state_t *au);

DESCRIPTION auparse_get_field_type returns a value from the auparse_type_t enum that describes the kind of data in the current field of the current record in the current event.

RETURN VALUE Returns AUPARSE_TYPE_UNCLASSIFIED if the fields data type has no known description or is an integer. Otherwise it returns another enum. Fields with the type AUPARSE_TYPE_ESCAPED must be interpretted to access their value since those fields raw value is encoded.

SEE ALSO auparse_get_field_name(3).

AUTHOR Steve Grubb

Red Hat Sept 2008 AUPARSE_GET_FIELD_TYPE(3)