We use wazuh for this (and netbox tags to track which hosts have wazuh agents managed by ansible or other means).