IR API

This section contains the following topics:

The IR API

This library supplies an interface to CA ControlMinder log files - seos.audit and seos.audit.bak. You can set whether the IR API library routes audit events of existing PMDs in addition to the local security events by setting the irecorder_audit token in the Windows registry or the UNIX seos.ini file.

This API enables an external application to view audit records in chronological order.

Note: The library only supports PMD audit events that are created on the same computer where CA ControlMinder is installed.

Important! The IR API is not safe for multi-threading.

Structures

Data Position

A void handle that an API function operates according to its value.

typedef struct
{
	int ir_ver;		CA ControlMinder IRecorder version
  	int ent_cnt;		Number of audit hosts
  	int curr_idx;		Current audit host
  	void *ents;		Pointer to host entries
} IRApiDataPosition;		Interpreted audit record