new upstream release (3.3.0); modify package compatibility for Stretch

[ossec-hids.git] / contrib / logtesting / 5 / res

diff --git a/contrib/logtesting/5/res b/contrib/logtesting/5/res
index 5ac8830..ae59790 100644 (file)
--- a/contrib/logtesting/5/res
+++ b/contrib/logtesting/5/res
@@ -7,6 +7,9 @@
 **Phase 2: Completed decoding.
        decoder: 'sudo'
        dstuser: 'dcid'
+       url: '/home/dcid'
+       srcuser: 'root'
+       status: '/usr/bin/tail /var/log/snort/alert.fast'
 
 **Phase 3: Completed filtering (rules).
        Rule id: '5403'