Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document