use default OSSEC location in config file