ossec-csyslogd is a daemon that forwards the OSSEC alerts via syslog. Configuration is done in the <syslog_output> section of the ossec.conf. (see ossec.conf: Syslog Output options)

ossec-csyslogd argument options

-c <config>

Run ossec-csyslogd using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf

-D <dir>

Chroot to <dir>.

Default: /var/ossec


Execute ossec-csyslogd in debug mode. This option can be used multiple times to increase the verbosity of the debug messages.


Run ossec-csyslogd in the foreground.

-g <group>

Run ossec-csyslogd as <group>.


Display the help message.


Test configuration.

-u <user>

Run ossec-csyslogd as <user>.

Default: ossecm


Version and license information.