From 013738d281673cb4fcc3086fa537bfdd10be0227 Mon Sep 17 00:00:00 2001
From: Jason Ish <jason.ish@oisf.net>
Date: Sat, 18 Feb 2023 19:00:50 -0600
Subject: [PATCH] mqtt-events-unintroduced: fix test

On inspection of the pcap, the signature 2226005 should only alert
once.

Issue: 5799
---
 tests/mqtt-events-unintroduced/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/mqtt-events-unintroduced/test.yaml b/tests/mqtt-events-unintroduced/test.yaml
index c5ed38a5e..bbeb44939 100644
--- a/tests/mqtt-events-unintroduced/test.yaml
+++ b/tests/mqtt-events-unintroduced/test.yaml
@@ -10,7 +10,7 @@ args:
 checks:
 
   - filter:
-      count: 2
+      count: 1
       match:
         event_type: alert
         alert.signature_id: 2226005
-- 
2.47.2