How to setup ClamAV and Wazuh in Cloud Server

Question

for setup wazuh, im already follow the documentation from here wazuh clamav im also update the config as follows

LogSyslog true
OnAccessExcludeRootUID yes

for testing, im adding new user user and set the privilege to be able to download eicar sample viruses here https://secure.eicar.org/eicar.com.txt into /tmp folder.

Im activate ClamAV with command

clamonacc --move=/tmp/quarantine

But, then when i run wget https://secure.eicar.org/eicar.com.txt with username user in folder /tmp, the eicar sample vius wont move into /tmp/quarantine