AUPARSE\_GET\_FIELD\_STR(3) Linux Audit API AUPARSE\_GET\_FIELD\_STR(3)

# [NAME](#NAME)

auparse\_get\_field\_str - get current field's value

# [SYNOPSIS](#SYNOPSIS)

**#include <auparse.h>**

**const char * auparse\_get\_field\_str(const auparse\_state\_t \*au);"**

# [DESCRIPTION](#DESCRIPTION)

auparse\_get\_field\_str allows access to the value in the current field of the current record in the current event.

# [RETURN VALUE](#RETURN_VALUE)

Returns NULL if an error occurs; otherwise, a pointer to the field's value.

# [SEE ALSO](#SEE_ALSO)

[**auparse\_get\_field\_name**(3)](/man/os/audit/auparse_get_field_name.3), [**auparse\_get\_field\_int**(3)](/man/os/audit/auparse_get_field_int.3), [**auparse\_interpret\_field**(3)](/man/os/audit/auparse_interpret_field.3), [**auparse\_next\_field**(3)](/man/os/audit/auparse_next_field.3).

# [AUTHOR](#AUTHOR)

Steve Grubb

Feb 2007 Red Hat

---

Document: auparse_get_field_str(3) from audit 4.2.1-r3 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace