ausearch_set_stop (3) Linux Manual Page
Synopsis
#include <auparse.h>
int ausearch_set_stop(auparse_state_t *au, austop_t where);
Description
ausearch_set_stop determines where the internal cursor will stop when a search condition is met. The possible values are:- AUSEARCH_STOP_EVENT
- This one repositions the cursors to the first field of the first record of the event containing the items searched for.
- AUSEARCH_STOP_RECORD
- This one repositions the cursors to the first field of the record containing the items searched for.
- AUSEARCH_STOP_FIELD
- This one simply stops on the current field when the evaluation of the rules becomes true.
- AUSEARCH_STOP_EVENT
