diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml
index c620c754..4d9cd709 100644
--- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml
+++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml
@@ -139,6 +139,8 @@ wazuh_manager_config:
   log_level: 1
   email_level: 12
   localfiles:
+    - format: 'syslog'
+      location: '/var/log/auth.log'
     - format: 'syslog'
       location: '/var/log/messages'
     - format: 'syslog'