The ossec-remoted program is the server side daemon that communicates with the agents. It runs as ossecr and is chrooted to /var/ossec by default.

-c <config>

Run using <config> as the configuration file.

Default value


-D <dir>

Chroot to <dir>

Default value



Run in debug mode. This option may be repeated to increase the verbosity of the debug messages.


Run in the foreground.

-g <group>

Run as a specific group.


Display the help message.


Test configuration.

-u <user>

Run as a specific user.

Default value



Display the version and license information


Avoid creating shared merged file (read only)