add info to ossec.conf
<integration>
<name>custom-telegram</name>
<level>7</level>
<hook_url>-zzzzzzz</hook_url>
<api_key>xxxxxxxxxxx</api_key>
<alert_format>json</alert_format>
</integration>
zzzzzzz - ID chat on telegram
xxxxxxxxxxx bot api telegram
change custom-telegram.py
to custom-telegram
and move to /var/ossec/integrations