metadata/service/audisp/init.yml

applications:
- auditd
classes:
- service.auditd.support
parameters:
  auditd:
    audisp:
      plugins:
        syslog:
          active: 'yes'
          direction: out
          path: builtin_syslog
          type: builtin
          args: LOG_INFO
          format: string