Added restchk script and corrected ossec config logic