---
name: "auparse_get_node"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/auparse_get_node"
---

# auparse\_get\_node(3)

get the event's machine node name

## NAME

auparse\_get\_node - get the event's machine node name

## SYNOPSIS

**#include \<auparse.h\>**

**const char \* auparse\_get\_node(const auparse\_state\_t \****au);"*

## DESCRIPTION

auparse\_get\_node gets the machine's node name if it exists in the audit event from the current event's timestamp data structure. Not all records have node names since its an admin configurable option.

## RETURN VALUE

Returns a copy of the node name or NULL if it does not exist or there was an error. The caller must free the string.

## SEE ALSO

[**auparse\_get\_timestamp**(3)](/auparse_get_timestamp/3.md), [**auparse\_get\_time**(3)](/auparse_get_time/3.md), [**auparse\_get\_milli**(3)](/auparse_get_milli/3.md). [**auparse\_get\_serial**(3)](/auparse_get_serial/3.md).

## AUTHOR

Steve Grubb