Edit File: ossec-hids-authd.service
[Unit] Description=OSSEC HIDS authd After=network.target [Service] WorkingDirectory=/var/ossec/ ExecStart=/var/ossec/bin/ossec-authd -p 1515 2>&1 >> /var/ossec/logs/ossec-authd.log [Install] WantedBy=multi-user.target