dce_aud_get_ev_info(3sec)
Returns a pointer to an event information structure (dce_aud_ev_info_t).
Used by the audit trail analysis and examination tools.
Synopsis
#include <dce/audit.h>
void dce_aud_get_ev_info(
dce_aud_rec_t ard,
dce_aud_ev_info_t **event_info,
unsigned32
*status);
Parameters
Input
ard
Designates an audit record descriptor that was returned by a previously successful call to the dce_aud_next( ) function.
Output
event_info
Returns an event-specific information item of the designated audit record. Returns NULL if there are no more information items.
status
The status code returned by this routine. This status code indicates whether the routine was completed successfully or not. If the routine was not completed
successfully, the reason for the failure is given.
Description
The dce_aud_get_ev_info( ) function returns a pointer to an event information structure. The designated record is usually obtained from an audit trail by
calling dce_aud_open( ) and dce_aud_next( ). If there is more than one item of event-specific information in the audit record, then one item is returned through one call to
dce_aud_get_ev_info( ). The order in which the items are returned is the same as the order in which they were included in the audit record through dce_aud_put_ev_info( ) calls.
This function allocates the memory to hold the human-readable representation of the audit record and returns the address of this memory.
Return Values
No value is returned.
Errors
The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.
aud_s_invalid_record_descriptor
The audit record descriptor is invalid.
aud_s_ok
The call was successful.
Related Information
Functions: