name: selinux_audited
ID: 1234
format:
	field:unsigned short common_type;	offset:0;	size:2;	signed:0;
	field:unsigned char common_flags;	offset:2;	size:1;	signed:0;
	field:unsigned char common_preempt_count;	offset:3;	size:1;	signed:0;
	field:int common_pid;	offset:4;	size:4;	signed:1;

	field:u32 requested;	offset:8;	size:4;	signed:0;
	field:u32 denied;	offset:12;	size:4;	signed:0;
	field:u32 audited;	offset:16;	size:4;	signed:0;
	field:int result;	offset:20;	size:4;	signed:1;
	field:__data_loc char[] scontext;	offset:24;	size:4;	signed:0;
	field:__data_loc char[] tcontext;	offset:28;	size:4;	signed:0;
	field:__data_loc char[] tclass;	offset:32;	size:4;	signed:0;

print fmt: "requested=0x%x denied=0x%x audited=0x%x result=%d scontext=%s tcontext=%s tclass=%s", REC->requested, REC->denied, REC->audited, REC->result, __get_str(scontext), __get_str(tcontext), __get_str(tclass)