Libauparse-Dev
- auparse_add_callback(3) add a callback handler for notifications
- auparse_destroy(3) release instance of parser
- auparse_feed_age_events(3) check events for complete based on time.
- auparse_feed_has_data(3) check if there is any data accumulating that might need flushing.
- auparse_feed(3) feed data into parser
- auparse_find_field_next(3) find next occurrence of field name
- auparse_find_field(3) search for field name
- auparse_first_field(3) reposition field cursor
- auparse_first_record(3) reposition record cursor
- auparse_flush_feed(3) flush any unconsumed feed data through parser.
- auparse_get_field_int(3) get current field's value as an int
- auparse_get_field_name(3) get current field's name
- auparse_get_field_num(3) get current field cursor location
- auparse_get_field_str(3) get current field's value
- auparse_get_field_type(3) get current field's data type
- auparse_get_filename(3) get the filename where record was found
- auparse_get_line_number(3) get line number where record was found
- auparse_get_milli(3) get the millisecond value of the event
- auparse_get_node(3) get the event's machine node name
- auparse_get_num_fields(3) get the number of fields
- auparse_get_num_records(3) get the number of records
- auparse_get_record_num(3) get current record cursor location
- auparse_get_record_text(3) access unparsed record data
- auparse_get_serial(3) get the event's serial number
- auparse_get_time(3) get event's time
- auparse_get_timestamp(3) access timestamp of the event
- auparse_get_type_name(3) get record's type translation
- auparse_get_type(3) get record's type
- auparse_goto_field_num(3) move field cursor to specific field
- auparse_goto_record_num(3) move record cursor to specific record
- auparse_init(3) initialize an instance of the audit parsing library
- auparse_interpret_field(3) get current field's interpreted value
- auparse_new_buffer(3) replace the buffer in the parser
- auparse_next_event(3) get the next event
- auparse_next_field(3) move field cursor
- auparse_next_record(3) move record cursor
- auparse_node_compare(3) compares node name values
- auparse_normalize_functions(3) Access normalized fields
- auparse_normalize(3) normalize the current event
- auparse_reset(3) reset audit parser instance
- auparse_set_eoe_timeout(3) set the end of event timeout value
- auparse_set_escape_mode(3) choose escape method
- auparse_timestamp_compare(3) compares timestamp values
- ausearch_add_expression(3) build up search expression
- ausearch_add_interpreted_item(3) build up search rule
- ausearch_add_item(3) build up search rule
- ausearch_add_regex(3) use regular expression search rule
- ausearch_add_timestamp_item_ex(3) build up search rule
- ausearch_add_timestamp_item(3) build up search rule
- ausearch_clear(3) clear search parameters
- ausearch_next_event(3) find the next event that meets search criteria
- ausearch_set_stop(3) set the cursor position