<tt>linux-audit-bounces@redhat.com wrote on 03/13/2006 09:50:46 AM: > On Friday 10 March 2006 17:45, Debora Velarde wrote: > > 1. In this case would auparse_get_host(auparse_state_t *au) retrieve the > > hostname of this record? > > Since this is introducing the notion of multiple machines potentially sharing > the same log...would it be more clear to change the name to prevent > confusion? > > Its currently host, but would could make it: server, node, machine, etc.</tt> <tt>OK, I have a question because I think there are two issues here: 1) Steve has a function, called auparse_get_host, which is paralleled by other things like get_serial, which implies that every event has an associated host 2) This particular event has a host field, I do not think that auparse_get_host(0 and auparse_get_filed(au,"host") are the same Do I understand this issue correctly? And if this is the case, is your reply Debbie's first question still true?</tt> <tt> > > -Steve > > -- > Linux-audit mailing list > Linux-audit@redhat.com > https://www.redhat.com/mailman/listinfo/linux-audit </tt>