From: Jason Ish <jason.ish@oisf.net>
Date: Sun, 19 Feb 2023 00:58:13 +0000 (-0600)
Subject: mqtt-events-missing-connect: fix test
X-Git-Tag: suricata-6.0.12~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a8e4ed2675e73c3d632e3f8a82303471d611d290;p=thirdparty%2Fsuricata-verify.git

mqtt-events-missing-connect: fix test

On inspection of the pcap, the signature 2226000 should only alert once.

Issue: 5799
---

diff --git a/tests/mqtt-events-missing-connect/test.yaml b/tests/mqtt-events-missing-connect/test.yaml
index 97bdb0e71..d8be65d8c 100644
--- a/tests/mqtt-events-missing-connect/test.yaml
+++ b/tests/mqtt-events-missing-connect/test.yaml
@@ -10,7 +10,7 @@ args:
 checks:
 
   - filter:
-      count: 2
+      count: 1
       match:
         event_type: alert
         alert.signature_id: 2226000