auparse_add_callback adds a callback function to the parse state
which is invoked to notify the application of parsing events. This is
part of the event feed API.
The signature of the callback is:
auparse_callback(auparse_state_t *au, auparse_cb_event_t cb_event_type,
When the callback is invoked it is passed:
a pointer to the parse_state
enumerated value indicating the reason why the callback was
pointer to user supplied private data. May be NULL.
pointer to function called when user_data is destroyed. May be
NULL. The signature is:
void destroy(void *user_data);
The destroy() function should be prepared to accept user_data
possibly being NULL.
The cb_event_type argument indicates why the callback was invoked.
It's possible values are:
A complete event has been parsed and is ready to be examined.
This is logically equivalent to the parse state immediately
See auparse_feed(3) for a complete code example.
This page is part of the audit (Linux Audit) project. Information
about the project can be found at
⟨http://people.redhat.com/sgrubb/audit/⟩. If you have a bug report
for this manual page, send it to email@example.com. This page
was obtained from the project's upstream Git repository
⟨https://github.com/linux-audit/audit-userspace.git⟩ on 2017-03-13.
If you discover any rendering problems in this HTML version of the
page, or you believe there is a better or more up-to-date source for
the page, or you have corrections or improvements to the information
in this COLOPHON (which is not part of the original manual page),
send a mail to firstname.lastname@example.org
Red Hat May 2007 AUPARSE_ADD_CALLBACK(3)