hey alberto,
thanks for the reply.
i can confirm that i have removed the folder AFTER doing the uninstall
process. the long single line command i have listed in my original post,
does include the command:
sudo rm -rf /var/ossec;
and after doing that i did confirm that the folder was gone.
i am attempting to purge and start from scratch with my ossec install.
i have uninstalled previously using apt:
sudo apt remove --purge ossec-hids-server
i have then removed all files and users associated with ossec:
sudo rm -f /etc/init.d/ossec /etc/rc0.d/K20ossec /etc/rc1.d/K20ossec
