---
name: "audit_set_backlog_wait_time"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_set_backlog_wait_time"
---

# audit\_set\_backlog\_wait\_time(3)

Set the audit backlog wait time

## NAME

audit\_set\_backlog\_wait\_time - Set the audit backlog wait time

## SYNOPSIS

```
#include <libaudit.h>
```

**int audit\_set\_backlog\_wait\_time(int** *fd***, uint32\_t** *bwt***);"**

## DESCRIPTION

audit\_set\_backlog\_wait\_time sets the time that the kernel will wait before attempting to send more audit events on the descriptor given in *fd*. The *bwt* parameter specifies the delay in jiffies before attempting to transfer more events when the backlog\_limit is reached. This gives the audit daemon a chance to drain the kernel queue. The default value is 60000 or 60 \* HZ setting in the kernel.

## RETURN VALUE

The return value is \<= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.

## SEE ALSO

[**audit\_set\_backlog\_limit**(3)](/audit_set_backlog_limit/3.md), [**audit\_open**(3)](/audit_open/3.md), [**auditd**(8)](/auditd/8.md), [**auditctl**(8)](/auditctl/8.md).

## AUTHOR

Steve Grubb