diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 2c73c972..55e1853b 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -447,7 +447,7 @@
     and not proc.name in (shell_binaries)
     and not exe_running_docker_save
   output: >
-    a shell configuration file has been modified (user=%user.name command=%proc.cmdline parent=%proc.pname pcmdline=%proc.pcmdline file=%fd.name container_id=%container.id image=%container.image.repository)
+    a shell configuration file has been modified (user=%user.name command=%proc.cmdline pcmdline=%proc.pcmdline file=%fd.name container_id=%container.id image=%container.image.repository)
   priority:
     WARNING
   tag: [file, mitre_persistence]