The /var/ossec/etc/internal_options.conf file includes several options not present int he ossec.conf. /var/ossec/etc/local_internal_options.conf can be used for changes to the defaults, and this file will not be overwritten during an upgrade.