Alerts options are available in the the following installation types:
All alerts options must be configured in the /var/ossec/etc/ossec.conf and used within the <ossec_config> tag.
XML excerpt to show location:
<ossec_config> <alerts> <!-- alerts options here --> </alerts> </ossec_config>
ossec.conf: Agentless Options
ossec.conf: Client Options
Enter search terms or a module, class or function name.