AUPARSE_GET_TIMESTAMP

Section: Linux Audit API (3)
Updated: Sept 2007
Page Index
 

NAME

auparse_get_timestamp - access timestamp of the event  

SYNOPSIS

#include <auparse.h>

const au_event_t *auparse_get_timestamp(auparse_state_t *au);

 

DESCRIPTION

auparse_get_timestamp provides an accessor function for the event's timestamp data structure. The data structure is as follows:

typedef struct
{
        time_t sec;             // Event seconds
        unsigned int milli;     // millisecond of the timestamp
        unsigned long serial;   // Serial number of the event
        const char *host;       // Machine's node name
} au_event_t;

 

RETURN VALUE

Returns NULL if an error occurs; otherwise, a valid pointer to the data.

 

SEE ALSO

auparse_get_time(3), auparse_get_milli(3), auparse_get_serial(3), auparse_get_node(3), auparse_timestamp_compare(3).

 

AUTHOR

Steve Grubb


 

Index

NAME
SYNOPSIS
DESCRIPTION
RETURN VALUE
SEE ALSO
AUTHOR