| ## dce_aud_get_ev_info(3sec) Returns a pointer to an event information structure (dce_aud_ev_info_t). Used by the audit trail analysis and examination tools. Synopsis #include <dce/audit.h> void dce_aud_get_ev_info( dce_aud_rec_t ard, dce_aud_ev_info_t **event_info, unsigned32 *status); Parameters Input ard Designates an audit record descriptor that was returned by a previously successful call to the dce_aud_next( ) function. Output event_info Returns an event-specific information item of the designated audit record. Returns NULL if there are no more information items. status The status code returned by this routine. This status code indicates whether the routine was completed successfully or not. If the routine was not completed successfully, the reason for the failure is given. Description The dce_aud_get_ev_info( ) function returns a pointer to an event information structure. The designated record is usually obtained from an audit trail by calling dce_aud_open( ) and dce_aud_next( ). If there is more than one item of event-specific information in the audit record, then one item is returned through one call to dce_aud_get_ev_info( ). The order in which the items are returned is the same as the order in which they were included in the audit record through dce_aud_put_ev_info( ) calls. This function allocates the memory to hold the human-readable representation of the audit record and returns the address of this memory. Return Values No value is returned. Errors The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages. aud_s_invalid_record_descriptor The audit record descriptor is invalid. aud_s_ok The call was successful. Related Information Functions: dce_aud_open(3sec) dce_aud_next(3sec) ##