/usr/share/ossec/contrib/ossec-eps.sh