Unable to use fields srcuser and dstuser in custom rule

[selivan]

local_rules.xml:

<group name="syslog,sudo,">
  <rule id="5407" level="0" noalert="1" overwrite="yes">
    <if_sid>5400</if_sid>
    <description>Successful sudo executed(with exception).</description>
    <field name="srcuser">!zabbix</field>
    <mitre>
      <id>T1548.003</id>
    </mitre>
    <group>pci_dss_10.2.5,pci_dss_10.2.2,gpg13_7.6,gpg13_7.8,gpg13_7.13,gdpr_IV_32.2,tsc_CC6.8,tsc_CC7.2,tsc_CC7.3,</group>
  </rule>
</group>

Configuration error:

wazuh-analysisd: ERROR: Failure to read rule 5407. Field 'srcuser' is static.

Static fields like user or action have corresponding tags in rule syntax: <user>, <action>. But srcuser and dstuser do not have any tags, so I can not filter their values.