---
name: "auparse_normalize"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/auparse_normalize"
---

# auparse\_normalize(3)

normalize the current event

## NAME

auparse\_normalize - normalize the current event

## SYNOPSIS

**#include \<auparse.h\>**

**int auparse\_normalize(auparse\_state\_t \****au,***normalize\_option\_t"***opt);"*

## DESCRIPTION

**auparse\_normalize** analyzes the current event so that the important information about the event can be accessed through a normalized API which positions to internal field cursor to the exact record and field when asked about specific information.

The auparse\_normalize function takes an opt argument to tell it how much information to gather. Legal values are:

```
	NORM_OPT_ALL - gather maximum information
	NORM_OPT_NO_ATTRS - do not gather subject/object attribute information
```

## RETURN VALUE

Returns 0 on success and 1 on error.

## SEE ALSO

**auparse\_normalize\_subject\_primary**(3)**,** **auparse\_normalize\_object\_primary**(3).

## AUTHOR

Steve Grubb