Skip to main content

Command Overview

beacon endpoint uninstall unloads the local Beacon service and removes managed endpoint files.
Command syntax
beacon endpoint uninstall
Use retention flags when you want to keep local evidence or preserve harness telemetry configuration.

Flags

FlagDescription
--userUse per-user endpoint paths. Enabled by default
--systemUse system endpoint paths and launch daemon
--log-path <path>Runtime JSONL log path
--keep-logsKeep runtime logs during uninstall
--keep-configKeep harness telemetry configuration during uninstall

Examples

Remove the default per-user install:
Remove the default per-user install
beacon endpoint uninstall
Remove Beacon but keep runtime logs:
Remove Beacon but keep runtime logs
beacon endpoint uninstall --keep-logs
Remove Beacon but keep harness telemetry configuration:
Remove Beacon but keep harness telemetry configuration
beacon endpoint uninstall --keep-config
Keep both logs and harness configuration:
Keep both logs and harness configuration
beacon endpoint uninstall --keep-logs --keep-config
Remove a system-mode deployment:
Remove a system-mode deployment
sudo beacon endpoint uninstall --system --keep-logs

Removed paths

Beacon removes files listed in its install manifest, including managed config, collector config, and service files. Unless --keep-logs is set, it also removes the configured runtime JSONL log.

Endpoint install

Reinstall the local endpoint collector and runtime telemetry.

Endpoint status

Check endpoint state before or after uninstalling.