first working ossec iteration