audit_reset_lost(3)

audit_reset_lost3

Reset lost event counter

Usage

#include <libaudit.h>

int audit_reset_lost(int fd);

Overview

audit_reset_lost() resets the kernel's lost event counter using the descriptor fd which must be an open audit netlink socket. This call requires that the kernel support AUDIT_FEATURE_BITMAP_LOST_RESET.

Return value

The return value is <= 0 on error, otherwise it is the netlink sequence id number.

Author

Steve Grubb

From audit 4.2.1-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.