The ossec-syscheckd daemon checks configured files for changes to the checksums, permissions or ownership. ossec-syscheckd is started by ossec-control. Configuration for ossec-syscheckd is handled in the ossec.conf.

See Syscheck for more detailed configuration information.

ossec-syscheckd argument options

-c <config>

Run ossec-syscheckd using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf


Execute ossec-syscheckd in debug mode. This can be used more than once to increase the verbosity of the debug messages.


Run ossec-syscheckd in the foreground.


Display the help message.


Test configuration.


Version and license information.