X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;ds=sidebyside;f=contrib%2Flogtesting%2F11%2Fres;fp=contrib%2Flogtesting%2F11%2Fres;h=f6cb8675fcb1e141a510d560cb81f433754d6054;hb=3f728675941dc69d4e544d3a880a56240a6e394a;hp=a132a0f6e657fc2c0befb12d51a62dc9ab639932;hpb=927951d1c1ad45ba9e7325f07d996154a91c911b;p=ossec-hids.git

diff --git a/contrib/logtesting/11/res b/contrib/logtesting/11/res
index a132a0f..f6cb867 100644
--- a/contrib/logtesting/11/res
+++ b/contrib/logtesting/11/res
@@ -10,9 +10,9 @@
        dstuser: 'root'
 
 **Phase 3: Completed filtering (rules).
-       Rule id: '5303'
-       Level: '3'
-       Description: 'User successfully changed UID to root.'
+       Rule id: '5305'
+       Level: '4'
+       Description: 'First time (su) is executed by user.'
 **Alert to be generated.