ausearch_add_expression man page on Mandriva

Man page or keyword search:  
man Server   17060 pages
apropos Keyword Search (all sections)
Output format
Mandriva logo
[printable version]

AUSEARCH_ADD_expression(3)	Linux Audit API	    AUSEARCH_ADD_expression(3)

NAME
       ausearch_add_expression - build up search expression

SYNOPSIS
       #include <auparse.h>

       int  ausearch_add_expression(auparse_state_t  *au,  const char *expres‐
       sion, char **error, ausearch_rule_t how);

DESCRIPTION
       ausearch_add_item adds  an  expression  to  the	current	 audit	search
       expression.   The  search  conditions  can  then	 be used to scan logs,
       files, or buffers for something of interest.  The expression  parameter
       contains an expression, as specified in ausearch-expression(5).

       The how parameter determines how this search expression will affect the
       existing search expression, if one is already  defined.	 The  possible
       values are:

	      AUSEARCH_RULE_CLEAR
		     Clear the current search expression, if any, and use only
		     this search expression.

	      AUSEARCH_RULE_OR
		     If a search expression E is already  configured,  replace
		     it by (E || this_search_expression).

	      AUSEARCH_RULE_AND
		     If	 a  search expression E is already configured, replace
		     it by (E && this_search_expression).

RETURN VALUE
       If  successful,	ausearch_add_expression	 returns  0.   Otherwise,   it
       returns	-1,  sets errno and it may set *error to an error message; the
       caller must free the error message using free(3).  If an error  message
       is not available or can not be allocated, *error is set to NULL.

SEE ALSO
       ausearch_add_item(3),	  ausearch_add_interpreted_item(3),	 ause‐
       arch_add_timestamp_item(3),	  ausearch_add_regex(3),	 ause‐
       arch_set_stop(3),  ausearch_clear(3), ausearch_next_event(3), ausearch-
       expression(5).

AUTHOR
       Miloslav Trmac

Red Hat				   Feb 2008	    AUSEARCH_ADD_expression(3)
[top]

List of man pages available for Mandriva

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Tweet
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
....................................................................
Vote for polarhome
Free Shell Accounts :: the biggest list on the net