---
name: "ausearch_set_stop"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/ausearch_set_stop"
---

# ausearch\_set\_stop(3)

set the cursor position

## NAME

 ausearch\_set\_stop - set the cursor position

## SYNOPSIS

**#include \<auparse.h\>**

**int ausearch\_set\_stop(auparse\_state\_t \****au,***austop\_t"***where);"*

## DESCRIPTION

ausearch\_set\_stop determines where the internal cursor will stop when a search condition is met. The possible values are:

- *AUSEARCH\_STOP\_EVENT*

  This one repositions the cursors to the first field of the first record of the event containing the items searched for.

- *AUSEARCH\_STOP\_RECORD*

  This one repositions the cursors to the first field of the record containing the items searched for.

- *AUSEARCH\_STOP\_FIELD*

  This one simply stops on the current field when the evaluation of the rules becomes true.

## RETURN VALUE

Returns -1 if an error occurs; otherwise, 0 for success.

## SEE ALSO

[**ausearch\_add\_item**(3)](/ausearch_add_item/3.md), [**ausearch\_add\_regex**(3)](/ausearch_add_regex/3.md), [**ausearch\_clear**(3)](/ausearch_clear/3.md), [**ausearch\_cur\_event**(3)](/ausearch_cur_event/3.md), [**ausearch\_next\_event**(3)](/ausearch_next_event/3.md).

## AUTHOR

Steve Grubb