---
name: "audit_request_status"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_request_status"
---

# audit\_request\_status(3)

Request status of the audit system

## NAME

audit\_request\_status - Request status of the audit system

## SYNOPSIS

```
#include <libaudit.h>
```

**int audit\_request\_status(int** *fd***);"**

## DESCRIPTION

audit\_request\_status requests that the kernel send status structure describing various settings on the descriptor given in *fd*. The audit\_status structure is as follows:

```
struct audit_status {
   __u32   mask;           /* Bit mask for valid entries */
   __u32   enabled;        /* 1 = enabled, 0 = disabled */
   __u32   failure;        /* Failure-to-log action */
   __u32   pid;            /* pid of auditd process */
   __u32   rate_limit;     /* messages rate limit (per second) */
   __u32   backlog_limit;  /* waiting messages limit */
   __u32   lost;           /* messages lost */
   __u32   backlog;        /* messages waiting in queue */
};
```

## RETURN VALUE

The return value is \<= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.

## SEE ALSO

[**audit\_open**(3)](/audit_open/3.md), [**audit\_get\_reply**(3)](/audit_get_reply/3.md), [**auditd**(8)](/auditd/8.md).

## AUTHOR

Steve Grubb