As the release maintaner for OSSEC, I have no idea why we didnt create a user forum until now. Everyone has been using either IRC or the mailing list til now. Mi culpa!
This forum is for everything from bug reports and feature requests, rule & decoder developnent, to general usage / configuration/ instalation questions.
Support/Development for OSSEC