table of contents
AUPARSE_GET_FIELD_TYPE(3) | Linux Audit API | AUPARSE_GET_FIELD_TYPE(3) |
NAME¶
auparse_get_field_type - get current field's data type
SYNOPSIS¶
#include <auparse.h>
int auparse_get_field_type(const auparse_state_t *au);
DESCRIPTION¶
auparse_get_field_type returns a value from the auparse_type_t enum that describes the kind of data in the current field of the current record in the current event.
RETURN VALUE¶
Returns AUPARSE_TYPE_UNCLASSIFIED if the field's data type has no known description or is an integer. Otherwise it returns another enum. Fields with the type AUPARSE_TYPE_ESCAPED must be interpreted to access their value since those field's raw value is encoded.
SEE ALSO¶
AUTHOR¶
Steve Grubb
Sept 2008 | Red Hat |