- name: restart rsyslog
  service: name=rsyslog state=restarted

- name: restart auditd
  service: name=auditd state=restarted