X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=contrib%2Flogtesting%2F11%2Fres;h=f6cb8675fcb1e141a510d560cb81f433754d6054;hb=refs%2Ftags%2Fdebian%2F3.3.0-1;hp=a132a0f6e657fc2c0befb12d51a62dc9ab639932;hpb=6ef2f786c6c8ead94841b5f93baf9f43421f08c8;p=ossec-hids.git

diff --git a/contrib/logtesting/11/res b/contrib/logtesting/11/res
index a132a0f..f6cb867 100644
--- a/contrib/logtesting/11/res
+++ b/contrib/logtesting/11/res
@@ -10,9 +10,9 @@
        dstuser: 'root'
 
 **Phase 3: Completed filtering (rules).
-       Rule id: '5303'
-       Level: '3'
-       Description: 'User successfully changed UID to root.'
+       Rule id: '5305'
+       Level: '4'
+       Description: 'First time (su) is executed by user.'
 **Alert to be generated.