---
name: "audit_reset_lost"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_reset_lost"
---

# audit\_reset\_lost(3)

reset lost event counter

## NAME

audit\_reset\_lost - reset lost event counter

## SYNOPSIS

**#include \<libaudit.h\>**

**int audit\_reset\_lost(int** *fd***);**

## DESCRIPTION

**audit\_reset\_lost**() resets the kernel's lost event counter using the descriptor *fd* which must be an open audit netlink socket.  This call requires that the kernel support **AUDIT\_FEATURE\_BITMAP\_LOST\_RESET**.

## RETURN VALUE

The return value is \<= 0 on error, otherwise it is the netlink sequence id number.

## SEE ALSO

[**audit\_get\_features**(3)](/audit_get_features/3.md), [**audit\_open**(3)](/audit_open/3.md), [**auditctl**(8)](/auditctl/8.md).

## AUTHOR

Steve Grubb