AUSEARCH\_CUR\_EVENT(3) Linux Audit API AUSEARCH\_CUR\_EVENT(3)

# [NAME](#NAME)

ausearch\_cur\_event - check if the current event meets search criteria

# [SYNOPSIS](#SYNOPSIS)

**#include <auparse.h>**

**int ausearch\_cur\_event(auparse\_state\_t \*au);"**

# [DESCRIPTION](#DESCRIPTION)

ausearch\_cur\_event will scan the input source and evaluate whether any record in the current event contains the data being searched for. Evaluation is done at the record level. If a match is found, the cursor is repositioned; otherwise, it remains on the last successfully parsed record within the current event.

# [RETURN VALUE](#RETURN_VALUE)

Returns -1 if an error occurs, 0 if no matches, and 1 for success.

# [SEE ALSO](#SEE_ALSO)

[**ausearch\_add\_item**(3)](/man/os/audit/ausearch_add_item.3), [**ausearch\_add\_regex**(3)](/man/os/audit/ausearch_add_regex.3), [**ausearch\_next\_event**(3)](/man/os/audit/ausearch_next_event.3), [**ausearch\_set\_stop**(3)](/man/os/audit/ausearch_set_stop.3).

# [AUTHOR](#AUTHOR)

Attila Lakatos

Feb 2024 Red Hat

---

Document: ausearch_cur_event(3) from audit 4.2.1-r4 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace