ossec-agentd is the client side daemon that communicates with the server. It runs as ossec and is chrooted to /var/ossec by default.

ossec-agentd argument options

-c <config>

Run ossec-agentd using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf

-D <dir>

Chroot to <dir>.

Default: /var/ossec


Run in debug mode. This option can be used multiple times to increase the verbosity of the debug messages.


Run ossec-agentd in the foreground.

-g <group>

Run ossec-agentd as <group>.


Display the help message.


Test configuration.

-u <user>

Run ossec-agentd as <user>.

Default: ossecm


Version and license information.