ossec.conf

<ossec_config>
  <client>
    <server>
      <address>172.17.0.1</address>
      <port>1514</port>
      <protocol>udp</protocol>
    </server>
    <enrollment>
      <enabled>yes</enabled>
      <manager_address>172.17.0.1</manager_address>
      <groups>default</groups>
    </enrollment>
    <notify_time>60</notify_time>
    <time-reconnect>120</time-reconnect>
    <auto_restart>yes</auto_restart>
    <crypto_method>aes</crypto_method>
  </client>
</ossec_config>