From d8e47ad6a5397f4b079662620d6312ee9c557494 Mon Sep 17 00:00:00 2001
From: Philippe Antoine <pantoine@oisf.net>
Date: Tue, 7 Apr 2026 21:43:00 +0200
Subject: [PATCH] dhcp: adds check for app-layer metadata logging in alerts

Ticket: 6091
---
 tests/dhcp-eve-extended/test.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tests/dhcp-eve-extended/test.yaml b/tests/dhcp-eve-extended/test.yaml
index e566ad6b2..ffa293b96 100644
--- a/tests/dhcp-eve-extended/test.yaml
+++ b/tests/dhcp-eve-extended/test.yaml
@@ -73,6 +73,14 @@ checks:
     match:
       event_type: alert
       alert.signature_id: 1
+- filter:
+    requires:
+      min-version: 9
+    count: 1
+    match:
+      event_type: alert
+      alert.signature_id: 1
+      dhcp.type: reply
 - filter:
     requires:
       min-version: 7
-- 
2.47.3