ossec-syscheckd

The ossec-syscheckd daemon checks configured files for changes to the checksums, permissions or ownership. ossec-syscheckd is started by ossec-control. Configuration for ossec-syscheckd is handled in the ossec.conf.

See Syscheck for more detailed configuration information.

ossec-syscheckd argument options

-c <config>

Run ossec-syscheckd using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf

-d

Execute ossec-syscheckd in debug mode. This can be used more than once to increase the verbosity of the debug messages.

-f

Run ossec-syscheckd in the foreground.

-h

Display the help message.

-t

Test configuration.

-V

Version and license information.