create dir var on agent
on agent, queue/rids needs to be accessed by user ossec