mqtt-events-unintroduced: fix test

On inspection of the pcap, the signature 2226005 should only alert
once.

Issue: 5799

diff --git a/tests/mqtt-events-unintroduced/test.yaml b/tests/mqtt-events-unintroduced/test.yaml
index c5ed38a5ec16a9b954f8095bafb08b647105cef1..bbeb44939a629b2d035a8198aa3b7af0eca0dcf1 100644 (file)
--- a/tests/mqtt-events-unintroduced/test.yaml
+++ b/tests/mqtt-events-unintroduced/test.yaml
@@ -10,7 +10,7 @@ args:
 checks:
 
   - filter:
-      count: 2
+      count: 1
       match:
         event_type: alert
         alert.signature_id: 2226005