As multiple events are generated for login multiple async messages are sent to the syslog, this can result in a later test receiving a message from an earlier one.