centos audit.log

  
ansible all -m yum -a 'name=audit state=present'
  
ansible all -m yum -a 'name=audit-libs state=present'
  
ansible all -m service -a 'name=auditd state=restarted'