AUPARSE_GET_TIMESTAMP(3)					  Linux Audit API					  AUPARSE_GET_TIMESTAMP(3)

NAME

       auparse_get_timestamp - access timestamp of the event

SYNOPSIS

       #include <auparse.h>

       const au_event_t *auparse_get_timestamp(auparse_state_t *au);

DESCRIPTION

       auparse_get_timestamp provides an accessor function for the event's timestamp data structure. The data structure is as follows:

       typedef struct
       {
	       time_t sec;	       // Event seconds
	       unsigned int milli;     // millisecond of the timestamp
	       unsigned long serial;   // Serial number of the event
	       const char *host;       // Machine's node name
       } au_event_t;

RETURN VALUE

       Returns NULL if an error occurs; otherwise, a valid pointer to the data.

SEE ALSO

       auparse_get_time(3), auparse_get_milli(3), auparse_get_serial(3), auparse_get_node(3), auparse_timestamp_compare(3).

AUTHOR

       Steve Grubb

Red Hat 							     Sept 2007						  AUPARSE_GET_TIMESTAMP(3)