AUPARSE_NORMALIZE_FUNCTIONS - Online Linux Manual PageSection : 3
Updated : March 2017
Source : Red Hat
Note : Linux Audit API

---

NAMEauparse_normalize_get_event_kind, auparse_normalize_subject_kind, auparse_normalize_get_action, auparse_normalize_object_kind, auparse_normalize_how, auparse_normalize_session, auparse_normalize_subject_primary, auparse_normalize_subject_secondary, auparse_normalize_subject_first_attribute, auparse_normalize_subject_next_attribute, auparse_normalize_object_primary, auparse_normalize_object_secondary, auparse_normalize_object_primary2, auparse_normalize_object_first_attribute, auparse_normalize_object_next_attribute, auparse_normalize_get_results, auparse_normalize_key − Access normalized fields

---

SYNOPSIS#include <auparse.h> Metadata Functions: const char *auparse_normalize_get_event_kind(auparse_state_t *au); const char *auparse_normalize_subject_kind(auparse_state_t *au); const char *auparse_normalize_get_action(auparse_state_t *au); const char *auparse_normalize_object_kind(auparse_state_t *au); const char *auparse_normalize_how(auparse_state_t *au); Positioning Functions: int auparse_normalize_session(auparse_state_t *au); int auparse_normalize_subject_primary(auparse_state_t *au); int auparse_normalize_subject_secondary(auparse_state_t *au); int auparse_normalize_subject_first_attribute(auparse_state_t *au); int auparse_normalize_subject_next_attribute(auparse_state_t *au); int auparse_normalize_object_primary(auparse_state_t *au); int auparse_normalize_object_secondary(auparse_state_t *au); int auparse_normalize_object_primary2(auparse_state_t *au); int auparse_normalize_object_first_attribute(auparse_state_t *au); int auparse_normalize_object_next_attribute(auparse_state_t *au); int auparse_normalize_get_results(auparse_state_t *au); int auparse_normalize_key(auparse_state_t *au);

---

DESCRIPTIONAfter calling the auparse_normalize function, you will probably want to access the audit event data. These function provide access to the results of the normalization. There are 2 kinds of function, metadata and positioning. The metadata functions all return a pointer to a string that describes something about the event. This data does not live inside the event but is kept in lookup tables inside the auparse library. The positioning function are different in that they move the internal cursor of auparse to the record and field that contains the information you want. You then use field accessor functions to retrieve the values.

---

RETURN VALUEThe positioning functions return < 0 on error, 0 if uninitialized, and 1 on success. The metadata functions return NULL on error and a pointer to a string on success.

---

SEE ALSOauparse_normalize(3), auparse_get_field_str(3), auparse_interpret_field(3). .BR

---

AUTHORSteve Grubb 0

---

Johanes Gumabo

---

Data Size   :   6,292 byte
man-auparse_normalize_functions.3Build   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   2 / 191,881
Visitor ID   :     :  
Visitor IP   :   3.148.117.240   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36

---

Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .

---

If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.

---

ERROR : Need New Coding :         (rof_BR|3|auparse_normalize_functions.3|46|1|.BR )    

---