FortiSIEM Linux Agent Template

Hello, I have two questions related to the Linux agent:

1. Is there a way to determine which paths and files the Linux agent collects logs from?
2. What are the best configuration practices for the template? Specifically, what should I enable and what should I avoid?