AUPARSE_FIND_FIELD(3) Linux Audit API AUPARSE_FIND_FIELD(3)

NAME auparse_find_field - search for field name

SYNOPSIS #include <auparse.h>

const char *auparse_find_field(auparse_state_t *au, const char *name);

DESCRIPTION auparse_find_field will scan all records in an event to find the first occurance of the field name passed to it. Searching begins from the cursor s current position. The field name is stored for subsequent searching.

RETURN VALUE Returns NULL field not found. If an error occurs errno will be set. Otherwise, it returns a pointer to the text value associated with the field.

SEE ALSO auparse_first_record(3), auparse_find_field_next(3).

AUTHOR Steve Grubb

Red Hat Feb 2007 AUPARSE_FIND_FIELD(3)