Renaming a file or a directory with mv command is not audited from Red Hat Enterprise Linux 7.6

Issue

• I used the following audit rule to capture the event of a file or a directory, including rename, in Red Hat Enterprise Linux 7.5 or older.

-w /root/test -k rename

• But, the same rule didn't work to capture the rename event in Red Hat Enterprise Linux 7.6.