The ossec-makelists utility to compile cdb databases. ossec-makelists will scan ossec.conf for database files, check the mtime, and recompile all out of date databases.

See CDB List lookups from within Rules for more information.

ossec-makelists argument options

-c <config>

Run with configuration file of <config>.

Default /var/ossec/etc/ossec.conf


Execute ossec-makelists in debug mode. This option can be used multiple times to increase the verbosity of the debug messages.


Force the rebuild of all configured databases.

-g <group>

Run as <group>.


Display the help message.


Test the configuration.

-u <user>

Run as <user>.


Display the version and license information.

ossec-makelists example usage

Example: Running ossec-makelists and an update is necessary

# /var/ossec/bin/ossec-makelists
 * File lists/blocked.txt.cdb need to be updated

Example: Running ossec-makelists when no update is necessary

# /var/ossec/bin/ossec-makelists
 * File lists/blocked.txt.cdb does not need to be compiled