ausearch_add_expression man page on Oracle

Man page or keyword search:  
man Server   33470 pages
apropos Keyword Search (all sections)
Output format
Oracle logo
[printable version]

AUSEARCH_ADD_expression(3)	Linux Audit API	    AUSEARCH_ADD_expression(3)

       ausearch_add_expression - build up search expression

       #include <auparse.h>

       int  ausearch_add_expression(auparse_state_t  *au,  const char *expres‐
       sion, char **error, ausearch_rule_t how);

       ausearch_add_item adds  an  expression  to  the	current	 audit	search
       expression.   The  search  conditions  can  then	 be used to scan logs,
       files, or buffers for something of interest.  The expression  parameter
       contains an expression, as specified in ausearch-expression(5).

       The how parameter determines how this search expression will affect the
       existing search expression, if one is already  defined.	 The  possible
       values are:

		     Clear the current search expression, if any, and use only
		     this search expression.

		     If a search expression E is already  configured,  replace
		     it by (E || this_search_expression).

		     If	 a  search expression E is already configured, replace
		     it by (E && this_search_expression).

       If  successful,	ausearch_add_expression	 returns  0.   Otherwise,   it
       returns	-1,  sets errno and it may set *error to an error message; the
       caller must free the error message using free(3).  If an error  message
       is not available or can not be allocated, *error is set to NULL.

       ausearch_add_item(3),	  ausearch_add_interpreted_item(3),	 ause‐
       arch_add_timestamp_item(3),	  ausearch_add_regex(3),	 ause‐
       arch_set_stop(3),   ausearch_clear(3),	ausearch_next_event(3),	 ause‐

       Miloslav Trmac

Red Hat				   Feb 2008	    AUSEARCH_ADD_expression(3)

List of man pages available for Oracle

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
Vote for polarhome
Free Shell Accounts :: the biggest list on the net