ossec-remoted

ossec-remoted is the server side daemon that communicates with the agents. It can listen to port 1514/udp (for OSSEC communications) and/or 514 (for syslog). It runs as ossecr and is chrooted to /var/ossec by default. ossec-remoted is configured in the <remote> section of ossec.conf. (see ossec.conf: Remote Options)

ossec-remoted argument options

-c <config>

Run ossec-remoted using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf

-D <dir>

Chroot to <dir>.

Default: /var/ossec

-d

Execute ossec-remoted in debug mode. This can be used more than once to increase the verbosity of the debug messages.

-f

Run ossec-remoted in the foreground.

-g <group>

Run ossec-remoted as <group>.

-h

Display the help message.

-t

Test configuration.

-u <user>

Run ossec-remoted as <user>.

Default: ossecm

-V

Version and license information.