Linux Agent

If I want to collect audit logs from the audit.log file on a Linux server using the Linux Agent, what configuration should I make in the agent template? Also, I want to understand how the Syslog tab in the template works and which files it monitors?