NAME | SYNOPSIS | DESCRIPTION | RETURN VALUE | SEE ALSO | AUTHOR | COLOPHON |
|
|
AUDIT_RESET_LOST(3) Linux Audit API AUDIT_RESET_LOST(3)
audit_reset_lost - reset lost event counter
#include <libaudit.h> int audit_reset_lost(int fd);
audit_reset_lost() resets the kernel's lost event counter using the descriptor fd which must be an open audit netlink socket. This call requires that the kernel support AUDIT_FEATURE_BITMAP_LOST_RESET.
The return value is <= 0 on error, otherwise it is the netlink sequence id number.
audit_get_features(3), audit_open(3), auditctl(8).
Steve Grubb
This page is part of the audit (Linux Audit) project. Information
about the project can be found at
⟨http://people.redhat.com/sgrubb/audit/⟩. If you have a bug report
for this manual page, send it to [email protected]. This
page was obtained from the project's upstream Git repository
⟨https://github.com/linux-audit/audit-userspace.git⟩ on
2025-08-11. (At that time, the date of the most recent commit
that was found in the repository was 2025-08-09.) If you discover
any rendering problems in this HTML version of the page, or you
believe there is a better or more up-to-date source for the page,
or you have corrections or improvements to the information in this
COLOPHON (which is not part of the original manual page), send a
mail to [email protected]
Red Hat July 2025 AUDIT_RESET_LOST(3)
Pages that refer to this page: audit_get_features(3)