Where are sudo incidents logged?

On redhat based linux systems like centos or fedora it is in:

  /var/log/secure

and for debian based systems like ubuntu it is in:

  /var/log/auth.log

Never mind, it is in /var/log/auth.log.

in Fedora it is in /var/log/audit/audit.log