ossec-syscheckd¶

The ossec-syscheckd daemon checks configured files for changes to the checksums, permissions or ownership. ossec-syscheckd is started by ossec-control. Configuration for ossec-syscheckd is handled in the ossec.conf.

See Syscheck for more detailed configuration information.

ossec-syscheckd argument options¶

-c <config>¶

Run ossec-syscheckd using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf

-d¶: Execute ossec-syscheckd in debug mode. This can be used more than once to increase the verbosity of the debug messages.

-f¶: Run ossec-syscheckd in the foreground.

-h¶: Display the help message.

-t¶: Test configuration.

-V¶: Version and license information.