<!--
{
  "availability" : [
    "macOS: 12.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "EndpointSecurity",
  "identifier" : "/documentation/EndpointSecurity/es_unmute_process_events(_:_:_:_:)",
  "metadataVersion" : "0.1.0",
  "role" : "Function",
  "symbol" : {
    "kind" : "Function",
    "modules" : [
      "Endpoint Security"
    ],
    "preciseIdentifier" : "c:@F@es_unmute_process_events"
  },
  "title" : "es_unmute_process_events(_:_:_:_:)"
}
-->

# es_unmute_process_events(_:_:_:_:)

Restores event delivery of a subset of events from a previously-muted process.

```
func es_unmute_process_events(_ client: OpaquePointer, _ audit_token: UnsafePointer<audit_token_t>, _ events: UnsafePointer<es_event_type_t>, _ event_count: Int) -> es_return_t
```

## Parameters

`client`

A previously-muted client. If the call succeeds, this client begins to receive events that match the types in `events` from the process indicated by `audit_token`.

`audit_token`

The audit token indicating the process to unmute.

`events`

An array of event types to unmute.

`event_count`

The number of members in the `events` array.

## Return Value

A value that indicates whether the unmute request succeeded or failed with an error.

## Discussion

To unmute all events from a process, use [`es_unmute_process(_:_:)`](/documentation/EndpointSecurity/es_unmute_process(_:_:)).

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)