NAME

dce_aud_get_ev_info — Returns a pointer to an event information stucture (dce_aud_ev_info_t).  Used by the audit trail analysis and examination tools

Synopsis

void dce_aud_get_ev_info(
dce_aud_rec_t ard,
dce_aud_ev_info_t ∗∗event_info,
unsigned32 ∗status);

Parameters

Input

ardDesignates an audit record descriptor that was returned by a previously successful call to the dce_aud_next() function. 

Output

event_infoReturns an event-specific information item of the designated audit record.  Returns NULL if there are no more information items. 

statusThe status code returned by this routine.  This status code indicates whether the routine was completed successfully or not.  If the routine was not completed successfully, the reason for the failure is given. 

Description

The dce_aud_get_ev_info() function returns a pointer to an event information structure.  The designated record is usually obtained from an audit trail by calling dce_aud_open() and dce_aud_next().  If there is more than one item of event-specific information in the audit record, then one item is returned through one call to dce_aud_get_ev_info().  The order in which the items are returned is the same as the order in which they were included in the audit record through dce_aud_put_ev_info() calls.  This function allocates the memory to hold the human-readable representation of the audit record and returns the address of this memory. 

Return Values

No value is returned. 

Errors

The following describes a partial list of errors that might be returned.  Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages. 

aud_s_invalid_record_descriptor
The audit record descriptor is invalid.

aud_s_ok
The call was successful.

Related Information

Functions: dce_aud_next(3sec), dce_aud_open(3sec).