diff --git a/src/afterfact.rs b/src/afterfact.rs
index dd4d5a70..51b0f318 100644
--- a/src/afterfact.rs
+++ b/src/afterfact.rs
@@ -725,7 +725,7 @@ mod tests {
             .unwrap();
         let expect_tz = expect_time.with_timezone(&Local);
         let expect =
-            "Timestamp,Computer,Channel,EventID,Level,MitreAttack,RuleTitle,Details,RecordID,RecordInformation,RulePath,FilePath\n"
+            "Timestamp,Computer,Channel,EventID,Level,MitreAttack,RecordID,RuleTitle,Details,RecordInformation,RulePath,FilePath\n"
                 .to_string()
                 + &expect_tz
                     .clone()
@@ -742,12 +742,12 @@ mod tests {
                 + ","
                 + test_attack
                 + ","
+                + test_record_id
+                + ","
                 + test_title
                 + ","
                 + output
                 + ","
-                + test_record_id
-                + ","
                 + test_recinfo
                 + ","
                 + test_rulepath
@@ -795,12 +795,12 @@ mod tests {
             + "|"
             + test_level
             + "|"
+            + test_recid
+            + "|"
             + test_title
             + "|"
             + output
             + "|"
-            + test_recid
-            + "|"
             + test_recinfo
             + "\n";
         assert_eq!(_get_serialized_disp_output(None,), expect_header);