Remove ossec stuff from files
root name functionality to function
Put rule printing into function
Update locals
Declarations above functions