Syslog Output options are available in the the following installation types:
All syslog_output options must be configured in the /var/ossec/etc/ossec.conf and used within the <ossec_config> tag.
XML excerpt to show location:
<ossec_config>
<syslog_output>
<!--
Syslog Output options here
-->
</syslog_output>
</ossec_config>