AUSEARCH_ADD_expression
NAMESYNOPSIS
DESCRIPTION
RETURN VALUE
SEE ALSO
AUTHOR
NAME
ausearch_add_expression − build up search expression
SYNOPSIS
#include <auparse.h>
int ausearch_add_expression(auparse_state_t *au, const char *expression, char **error, ausearch_rule_t how);
DESCRIPTION
ausearch_add_item adds an expression to the current audit search expression. The search conditions can then be used to scan logs, files, or buffers for something of interest. The expression parameter contains an expression, as specified in ausearch-expression(5).
The how parameter determines how this search expression will affect the existing search expression, if one is already defined. The possible values are:
AUSEARCH_RULE_CLEAR
Clear the current search expression, if any, and use only this search expression.
AUSEARCH_RULE_OR
If a search expression E is already configured, replace it by (E || this_search_expression).
AUSEARCH_RULE_AND
If a search expression E is already configured, replace it by (E && this_search_expression).
RETURN VALUE
If successful, ausearch_add_expression returns 0. Otherwise, it returns -1, sets errno and it may set *error to an error message; the caller must free the error message using free(3). If an error message is not available or can not be allocated, *error is set to NULL.
SEE ALSO
ausearch_add_item(3), ausearch_add_interpreted_item(3), ausearch_add_timestamp_item(3), ausearch_add_regex(3), ausearch_set_stop(3), ausearch_clear(3), ausearch_next_event(3), ausearch-expression(5).
AUTHOR
Miloslav Trmac
More Linux Commands
manpages/ksshaskpass.1.html
ksshaskpass(1) - prompts a user for a passphrase using KDE
kshaskpass is a KDE-based passphrase dialog for use with OpenSSH. It is intended to be called by the ssh-add(1) program and not invoked directly. It allows ssh-
manpages/XtNewString.3.html
XtNewString(3) - memory management functions (Man Page).....
The XtMalloc functions returns a pointer to a block of storage of at least the specified size bytes. If there is insufficient memory to allocate the new block,
manpages/SDL_WM_IconifyWindow.3.html
SDL_WM_IconifyWindow(3) - Iconify/Minimise the window.......
If the application is running in a window managed environment SDL attempts to iconify/minimise it. If SDL_WM_IconifyWindow is successful, the application will r
manpages/Net::DNS::FAQ.3pm.html
Net::DNS::FAQ(3pm) - Frequently Asked Net::DNS Questions....
This document serves to answer the most frequently asked questions on both the Net::DNS Mailing List and those sent to the author. The latest version of this FA
manpages/ppmchange.1.html
ppmchange(1) - change all pixels of one color to another in
This program is part of Netpbm(1) ppmchange reads a PPM image as input and changes all pixels of color oldcolor to color newcolor. You may specify up to 256 old
manpages/XMapRequestEvent.3.html
XMapRequestEvent(3) - MapRequest event structure (Man Page)
The structure for MapRequest events contains: typedef struct { int type; /* MapRequest */ unsigned long serial; /* # of last request processed by server */ Bool
manpages/glColor3b.3gl.html
glColor3b(3gl) - set the current color - Linux manual page
The GL stores both a current single-valued color index and a current four-valued RGBA color. glColor sets a new four-valued RGBA color. glColor has two major va
manpages/Tcl_SetDefaultEncodingDir.3.html
Tcl_SetDefaultEncodingDir(3) - procedures for creating and u
Tcl_GetEncoding finds an encoding given its name. The name may refer to a built-in Tcl encoding, a user-defined encoding registered by calling Tcl_CreateEncodin
manpages/imtest.1.html
imtest(1) - interactive IMAP test program - Linux man page
imtest is a utility that allows you to authenticate to a IMAP or IMSP server and interactively issue commands to it. Once authenticated you may issue any IMAP o
manpages/re_exec.3.html
re_exec(3) - BSD regex functions (Library - Linux man page)
re_comp() is used to compile the null-terminated regular expression pointed to by regex. The compiled pattern occupies a static area, the pattern buffer, which
manpages/ldap_count_values.3.html
ldap_count_values(3) - LDAP attribute value handling routine
These routines are used to retrieve and manipulate attribute values from an LDAP entry as returned by ldap_first_entry(3) or ldap_next_entry(3). ldap_get_values
manpages/Module::Build::Platform::VMS.3pm.html
Module::Build::Platform::VMS(3pm) - Builder class for VMS pl
This module inherits from Module::Build::Base and alters a few minor details of its functionality. Please see Module::Build for the general docs. Overridden Met
