AUDIT\_SET\_BACKLOG\_WAIT\_TIME(3) Library Functions Manual AUDIT\_SET\_BACKLOG\_WAIT\_TIME(3)

# [NAME](#NAME)

audit\_set\_backlog\_wait\_time - Set the audit backlog wait time

# [SYNOPSIS](#SYNOPSIS)

```
#include <libaudit.h>
```

```
int audit_set_backlog_wait_time(int fd, uint32_t bwt);"
```

# [DESCRIPTION](#DESCRIPTION)

audit\_set\_backlog\_wait\_time sets the time that the kernel will wait before attempting to send more audit events on the descriptor given in *fd*. The *bwt* parameter specifies the delay in jiffies before attempting to transfer more events when the backlog\_limit is reached. This gives the audit daemon a chance to drain the kernel queue. The default value is 60000 or 60 * HZ setting in the kernel.

# [RETURN VALUE](#RETURN_VALUE)

The return value is &lt;= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.

# [SEE ALSO](#SEE_ALSO)

[**audit\_set\_backlog\_limit**(3)](/man/os/audit/audit_set_backlog_limit.3), [**audit\_open**(3)](/man/os/audit/audit_open.3), [**auditd**(8)](/man/os/audit/auditd.8), [**auditctl**(8)](/man/os/audit/auditctl.8).

# [AUTHOR](#AUTHOR)

Steve Grubb

Oct 2014 Linux Audit API

---

Document: audit_set_backlog_wait_time(3) from audit 4.2.1-r1 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace