auparse_new_buffer - Man Page
replace the buffer in the parser
Synopsis
#include <auparse.h>
int auparse_new_buffer(auparse_state_t *au, const char *data, size_t data_len);
- au
The audit parse state
- data
a buffer of data to give to the parser, it is data_len bytes long. The data is copied in the parser, upon return the caller may free or reuse the data buffer.
- data_len
number of bytes in data
Description
auparse_new_buffer replaces the data that the parser works on. auparse_init() must have been called with a source type of AUSOURCE_BUFFER.
Return Value
Returns 1 if an error occurs; otherwise, 0 for success.
See Also
Info
Feb 2021 Red Hat Linux Audit API