From: Jason Ish <jason.ish@oisf.net>
Date: Fri, 17 Feb 2023 18:34:36 +0000 (-0600)
Subject: mqtt-events-invalid-qos: fix test
X-Git-Tag: suricata-6.0.12~22
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d827f56f8286f61b977df90950d3e8b2598650d6;p=thirdparty%2Fsuricata-verify.git

mqtt-events-invalid-qos: fix test

On inspection of the pcap, the signature 2226006 should only alert once.

Issue: 5799
---

diff --git a/tests/mqtt-events-invalid-qos/test.yaml b/tests/mqtt-events-invalid-qos/test.yaml
index 44b3eac7a..8f1fadc74 100644
--- a/tests/mqtt-events-invalid-qos/test.yaml
+++ b/tests/mqtt-events-invalid-qos/test.yaml
@@ -10,7 +10,7 @@ args:
 checks:
 
   - filter:
-      count: 2
+      count: 1
       match:
         event_type: alert
         alert.signature_id: 2226006