Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document
Agree would be good to mention server-agent, just to help people understand how it works.