[Unit]
Description=OSSEC HIDS 
After=network.target 

[Service]
Type=oneshot
RemainAfterExit=yes
WorkingDirectory=/var/ossec/
ExecStart=/var/ossec/bin/ossec-control start
ExecStop=/var/ossec/bin/ossec-control stop

[Install]
WantedBy=multi-user.target