NAME | SYNOPSIS | DESCRIPTION | RETURN VALUE | SEE ALSO | AUTHOR | COLOPHON |
|
|
AUDIT_RESET...TIME_ACTUAL(3) Linux Audit API AUDIT_RESET...TIME_ACTUAL(3)
audit_reset_backlog_wait_time_actual - reset backlog wait time actual counter
#include <libaudit.h> int audit_reset_backlog_wait_time_actual(int fd);
audit_reset_backlog_wait_time_actual() resets the kernel's running total of how long system calls have waited for space in the audit event queue. The fd must be an open audit netlink socket. This call is useful when administrators enable backlog waiting via the audit_set_backlog_wait_time(3) option to preserve events in tight memory situations. Periodically clearing the counter allows detection of renewed backlog waiting after changing the queue size or wait time. The kernel must support the AUDIT_STATUS_BACKLOG_WAIT_TIME_ACTUAL field for this call to succeed.
The return value is <= 0 on error, otherwise it is the netlink sequence id number.
audit_set_backlog_wait_time(3), audit_open(3), auditctl(8).
Steve Grubb
This page is part of the audit (Linux Audit) project. Information
about the project can be found at
⟨http://people.redhat.com/sgrubb/audit/⟩. If you have a bug report
for this manual page, send it to [email protected]. This
page was obtained from the project's upstream Git repository
⟨https://github.com/linux-audit/audit-userspace.git⟩ on
2025-08-11. (At that time, the date of the most recent commit
that was found in the repository was 2025-08-09.) If you discover
any rendering problems in this HTML version of the page, or you
believe there is a better or more up-to-date source for the page,
or you have corrections or improvements to the information in this
COLOPHON (which is not part of the original manual page), send a
mail to [email protected]
Red Hat July 2025 AUDIT_RESET...TIME_ACTUAL(3)