beacon endpoint wazuh validate

Write and describe a Beacon Wazuh validation event

beacon endpoint wazuh validate

beacon endpoint wazuh validate writes a Beacon validation event to the runtime JSONL log and describes it, so you can verify localfile ingestion in Wazuh.

beacon endpoint wazuh validate

Examples

Write a validation event for the default per-user install:

beacon endpoint wazuh validate

Write a validation event to a custom runtime log:

beacon endpoint wazuh validate --log-path /path/to/runtime.jsonl

Flags

Flag	Description
--user	Use per-user endpoint paths. Enabled by default
--system	Use system endpoint paths and launch daemon
--log-path <path>	Runtime JSONL log path

Related

beacon endpoint wazuh print-config

Print the Wazuh localfile snippet.

beacon endpoint dashboard

Inspect Beacon events locally.