AUPARSE\_GET\_TIMESTAMP(3) Linux Audit API AUPARSE\_GET\_TIMESTAMP(3)

# [NAME](#NAME)

auparse\_get\_timestamp - access timestamp of the event

# [SYNOPSIS](#SYNOPSIS)

**#include <auparse.h>**

**const au\_event\_t * auparse\_get\_timestamp(const auparse\_state\_t \*au);"**

# [DESCRIPTION](#DESCRIPTION)

auparse\_get\_timestamp provides an accessor function for the event's timestamp data structure. The data structure is as follows:

```
typedef struct
{


        time_t sec;             // Event seconds


        unsigned int milli;     // millisecond of the timestamp


        unsigned long serial;   // Serial number of the event


        const char *host;       // Machine's node name
} au_event_t;
```

# [RETURN VALUE](#RETURN_VALUE)

Returns NULL if an error occurs; otherwise, a valid pointer to the data.

# [SEE ALSO](#SEE_ALSO)

[**auparse\_get\_time**(3)](/man/os/audit/auparse_get_time.3), [**auparse\_get\_milli**(3)](/man/os/audit/auparse_get_milli.3), [**auparse\_get\_serial**(3)](/man/os/audit/auparse_get_serial.3), [**auparse\_get\_node**(3)](/man/os/audit/auparse_get_node.3), [**auparse\_timestamp\_compare**(3)](/man/os/audit/auparse_timestamp_compare.3).

# [AUTHOR](#AUTHOR)

Steve Grubb

Sept 2007 Red Hat

---

Document: auparse_get_timestamp(3) from audit 4.2.1-r1 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace