---
name: "auparse_get_timestamp"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/auparse_get_timestamp"
---

# auparse\_get\_timestamp(3)

access timestamp of the event

## NAME

auparse\_get\_timestamp - access timestamp of the event

## SYNOPSIS

**#include \<auparse.h\>**

**const au\_event\_t \* auparse\_get\_timestamp(const auparse\_state\_t \****au);"*

## DESCRIPTION

auparse\_get\_timestamp provides an accessor function for the event's timestamp data structure. The data structure is as follows:

```
typedef struct
{
        time_t sec;             // Event seconds
        unsigned int milli;     // millisecond of the timestamp
        unsigned long serial;   // Serial number of the event
        const char *host;       // Machine's node name
} au_event_t;
```

## RETURN VALUE

Returns NULL if an error occurs; otherwise, a valid pointer to the data.

## SEE ALSO

[**auparse\_get\_time**(3)](/auparse_get_time/3.md), [**auparse\_get\_milli**(3)](/auparse_get_milli/3.md), [**auparse\_get\_serial**(3)](/auparse_get_serial/3.md), [**auparse\_get\_node**(3)](/auparse_get_node/3.md), [**auparse\_timestamp\_compare**(3)](/auparse_timestamp_compare/3.md).

## AUTHOR

Steve Grubb