---
name: "audit_reset_backlog_wait_time_actual"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_reset_backlog_wait_time_actual"
---

# audit\_reset\_backlog\_wait\_time\_actual(3)

reset backlog wait time actual counter

## NAME

audit\_reset\_backlog\_wait\_time\_actual - reset backlog wait time actual counter

## SYNOPSIS

**#include \<libaudit.h\>**

**int audit\_reset\_backlog\_wait\_time\_actual(int** *fd***);**

## DESCRIPTION

**audit\_reset\_backlog\_wait\_time\_actual**() resets the kernel's running total of how long system calls have waited for space in the audit event queue.  The *fd* must be an open audit netlink socket.  This call is useful when administrators enable backlog waiting via the [**audit\_set\_backlog\_wait\_time**(3)](/audit_set_backlog_wait_time/3.md) option to preserve events in tight memory situations.  Periodically clearing the counter allows detection of renewed backlog waiting after changing the queue size or wait time.  The kernel must support the **AUDIT\_STATUS\_BACKLOG\_WAIT\_TIME\_ACTUAL** field for this call to succeed.

## RETURN VALUE

The return value is \<= 0 on error, otherwise it is the netlink sequence id number.

## SEE ALSO

[**audit\_set\_backlog\_wait\_time**(3)](/audit_set_backlog_wait_time/3.md), [**audit\_open**(3)](/audit_open/3.md), [**auditctl**(8)](/auditctl/8.md).

## AUTHOR

Steve Grubb