AUPARSE\_GET\_FIELD\_TYPE(3) Linux Audit API AUPARSE\_GET\_FIELD\_TYPE(3)

# [NAME](#NAME)

auparse\_get\_field\_type - get current field's data type

# [SYNOPSIS](#SYNOPSIS)

**#include <auparse.h>**

**int auparse\_get\_field\_type(const auparse\_state\_t \*au);"**

# [DESCRIPTION](#DESCRIPTION)

auparse\_get\_field\_type returns a value from the auparse\_type\_t enum that describes the kind of data in the current field of the current record in the current event.

# [RETURN VALUE](#RETURN_VALUE)

Returns AUPARSE\_TYPE\_UNCLASSIFIED if the field's data type has no known description or is an integer. Otherwise it returns another enum. Fields with the type AUPARSE\_TYPE\_ESCAPED must be interpreted to access their value since those field's raw value is encoded.

# [SEE ALSO](#SEE_ALSO)

[**auparse\_get\_field\_name**(3)](/man/os/audit/auparse_get_field_name.3).

# [AUTHOR](#AUTHOR)

Steve Grubb

Sept 2008 Red Hat

---

Document: auparse_get_field_type(3) from audit 4.2.1-r1 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace