audit_reset_lost(3) — Linux manual page

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUE | SEE ALSO | AUTHOR | COLOPHON

AUDIT_RESET_LOST(3)          Linux Audit API          AUDIT_RESET_LOST(3)

NAME         top

       audit_reset_lost - reset lost event counter

SYNOPSIS         top

       #include <libaudit.h>

       int audit_reset_lost(int fd);

DESCRIPTION         top

       audit_reset_lost() resets the kernel's lost event counter using
       the descriptor fd which must be an open audit netlink socket.
       This call requires that the kernel support
       AUDIT_FEATURE_BITMAP_LOST_RESET.

RETURN VALUE         top

       The return value is <= 0 on error, otherwise it is the netlink
       sequence id number.

SEE ALSO         top

       audit_get_features(3), audit_open(3), auditctl(8).

AUTHOR         top

       Steve Grubb

COLOPHON         top

       This page is part of the audit (Linux Audit) project.  Information
       about the project can be found at 
       ⟨http://people.redhat.com/sgrubb/audit/⟩.  If you have a bug report
       for this manual page, send it to [email protected].  This
       page was obtained from the project's upstream Git repository
       ⟨https://github.com/linux-audit/audit-userspace.git⟩ on
       2025-08-11.  (At that time, the date of the most recent commit
       that was found in the repository was 2025-08-09.)  If you discover
       any rendering problems in this HTML version of the page, or you
       believe there is a better or more up-to-date source for the page,
       or you have corrections or improvements to the information in this
       COLOPHON (which is not part of the original manual page), send a
       mail to [email protected]

Red Hat                         July 2025             AUDIT_RESET_LOST(3)

Pages that refer to this page: audit_get_features(3)