beacon endpoint gcs

Forwarding Command

Use beacon endpoint gcs to generate Google Cloud Storage forwarding content for Beacon endpoint events. The generated pack keeps Beacon as a local JSONL producer and helps your customer-managed Vector agent upload runtime.jsonl to a GCS bucket as gzip-compressed NDJSON. Beacon does not store Google Cloud credentials, service accounts, workload identity settings, bucket IAM, lifecycle rules, retention policies, or encryption settings. Keep those values in Google Cloud, Vector, endpoint-management policy, or deployment tooling.

Command syntax

beacon endpoint gcs [command]

Commands

beacon endpoint gcs print-config

Print the Vector Google Cloud Storage forwarding template for the configured runtime log.

beacon endpoint gcs install-pack

Write Google Cloud Storage forwarding content to a directory.

beacon endpoint gcs validate

Write and describe a Beacon Google Cloud Storage validation event.

Runtime log paths

Mode	Path
User mode	`~/.beacon/endpoint/logs/runtime.jsonl`
System mode	`/var/log/beacon-agent/runtime.jsonl`

beacon endpoint gcs print-config

beacon endpoint gcs print-config prints a Vector configuration that tails the selected Beacon runtime JSONL log and writes gzip-compressed NDJSON objects to Google Cloud Storage.

Print the configuration

beacon endpoint gcs print-config

Use this command when you want to inspect or copy the Vector template into an existing endpoint forwarding workflow.

Examples

Print Vector config for the default per-user Beacon install:

Print Vector config for the default per-user Beacon install

beacon endpoint gcs print-config

Print Vector config for a system-mode MDM deployment:

Print Vector config for a system-mode MDM deployment

sudo /opt/beacon/bin/beacon endpoint gcs print-config --system

Print Vector config for a custom runtime log:

Print Vector config for a custom runtime log

beacon endpoint gcs print-config --log-path /path/to/runtime.jsonl

Flags

Flag	Description
`--user`	Use per-user endpoint paths. Enabled by default
`--system`	Use system endpoint paths and launch daemon
`--log-path <path>`	Runtime JSONL log path

beacon endpoint gcs install-pack

beacon endpoint gcs install-pack writes Google Cloud Storage forwarding content to a directory.

Generate the integration pack

beacon endpoint gcs install-pack --output ./beacon-gcs-pack

The pack includes setup instructions, a one-shot GCS upload smoke-test script, a Vector gcp_cloud_storage forwarding template, and sample Beacon endpoint events.

Examples

Generate a content pack for the default per-user install:

Generate a content pack for the default per-user install

beacon endpoint gcs install-pack --output ./beacon-gcs-pack

Generate a content pack for a system-mode deployment:

Generate a content pack for a system-mode deployment

sudo /opt/beacon/bin/beacon endpoint gcs install-pack \
  --system \
  --output ./beacon-gcs-pack

Generate a content pack for a custom runtime log:

Generate a content pack for a custom runtime log

beacon endpoint gcs install-pack \
  --output ./beacon-gcs-pack \
  --log-path /path/to/runtime.jsonl

Flags

Flag	Description
`--output <dir>`	Output directory for the Google Cloud Storage content pack. Defaults to `beacon-gcs-pack`
`--user`	Use per-user endpoint paths. Enabled by default
`--system`	Use system endpoint paths and launch daemon
`--log-path <path>`	Runtime JSONL log path

beacon endpoint gcs validate

beacon endpoint gcs validate writes a Beacon validation event to the runtime JSONL log and prints the expected GCS validation fields and follow-up Google Cloud checks.

Run the validation check

beacon endpoint gcs validate

Examples

Write a validation event for the default per-user install:

Write a validation event for the default per-user install

beacon endpoint gcs validate

Write a validation event for a system-mode deployment:

Write a validation event for a system-mode deployment

sudo /opt/beacon/bin/beacon endpoint gcs validate --system

Write a validation event to a custom runtime log:

Write a validation event to a custom runtime log

beacon endpoint gcs validate --log-path /path/to/runtime.jsonl

The validation command writes the local event only. Confirm remote delivery with Google Cloud tooling:

gcloud storage ls "gs://${BEACON_GCS_BUCKET}/${BEACON_GCS_PREFIX}/**"
gcloud storage cat "gs://${BEACON_GCS_BUCKET}/${BEACON_GCS_PREFIX}/date=<date>/<object>.jsonl.gz" | gzip -dc | grep "Beacon endpoint GCS validation event"

Expected validation fields:

vendor=beacon product=endpoint-agent destination.type=gcs destination.mode=google_cloud_storage_jsonl

Flags

Flag	Description
`--user`	Use per-user endpoint paths. Enabled by default
`--system`	Use system endpoint paths and launch daemon
`--log-path <path>`	Runtime JSONL log path

Google Cloud Storage forwarding

Configure Vector forwarding from Beacon JSONL into Google Cloud Storage.

Log forwarding

Review forwarding patterns and validation steps.

Endpoint agent

Install and inspect the local endpoint agent.

Endpoint event schema

Review normalized Beacon JSONL fields and example events.

Install and Upgrade

CLI Resources

Command Manual

beacon endpoint gcs

Forwarding Command

Commands

beacon endpoint gcs print-config

beacon endpoint gcs install-pack

beacon endpoint gcs validate

Runtime log paths

beacon endpoint gcs print-config

Examples

Flags

beacon endpoint gcs install-pack

Examples

Flags

beacon endpoint gcs validate

Examples

Flags

Google Cloud Storage forwarding

Log forwarding

Endpoint agent

Endpoint event schema

​Forwarding Command

​Commands

beacon endpoint gcs print-config

beacon endpoint gcs install-pack

beacon endpoint gcs validate

​Runtime log paths

​beacon endpoint gcs print-config

​Examples

​Flags

​beacon endpoint gcs install-pack

​Examples

​Flags

​beacon endpoint gcs validate

​Examples

​Flags

​Related

Google Cloud Storage forwarding

Log forwarding

Endpoint agent

Endpoint event schema

Forwarding Command

Commands

Runtime log paths

beacon endpoint gcs print-config

Examples

Flags

beacon endpoint gcs install-pack

Examples

Flags

beacon endpoint gcs validate

Examples

Flags

Related