AUSEARCH\_NEXT\_EVENT(3) Linux Audit API AUSEARCH\_NEXT\_EVENT(3)

# [NAME](#NAME)

ausearch\_next\_event - find the next event that meets search criteria

# [SYNOPSIS](#SYNOPSIS)

**#include <auparse.h>**

**int ausearch\_next\_event(auparse\_state\_t \*au);"**

# [DESCRIPTION](#DESCRIPTION)

ausearch\_next\_event will scan the input source and evaluate whether any record in an event contains the data being searched for. Evaluation is done at the record level.

# [RETURN VALUE](#RETURN_VALUE)

Returns -1 if an error occurs, 0 if no matches, and 1 for success.

# [SEE ALSO](#SEE_ALSO)

[**ausearch\_add\_item**(3)](/man/os/audit/ausearch_add_item.3), [**ausearch\_add\_regex**(3)](/man/os/audit/ausearch_add_regex.3), [**ausearch\_set\_stop**(3)](/man/os/audit/ausearch_set_stop.3).

# [AUTHOR](#AUTHOR)

Steve Grubb

Feb 2007 Red Hat

---

Document: ausearch_next_event(3) from audit 4.2.1-r1 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace