Rules for File Rename

[Yogi Valentino]

I'm using FIM to make a rename rule file

<group name="syscheck, rename">
 <rule id="100101" level="5" timeframe="30">
    <if_sid>553</if_sid>
    <if_matched_sid>554</if_matched_sid>
    <same_field>sha1</same_field>
    <description>File $(file) rename</description>
  </rule>
</group>

This is what it looks like. I want to make a rule description like this

File $(file) renamed to $(new_file)

Any ideas?

[Md. Nazmur Sakib]

I believe you have got your answer in this thread.
https://groups.google.com/g/wazuh/c/XO5U4DTLl10