opschain admin siem test
Included from Basic tier
Sends one synthetic info:siem:test event through the connection's
real formatter and sender, synchronously — the exact payload shape, token
custody and transport the forwarder uses, so a green test means the real
feed will flow. Nothing is recorded on the event stream and the delivery
cursor is untouched; the verb itself is audited
(api:siem_connections:test) with the outcome.
opschain admin siem test splunk-main
Delivered a synthetic test event through splunk-main
opschain admin siem test soc-syslog
Test delivery through soc-syslog FAILED: dial tcp 10.0.0.9:6514: connect: connection refused
The failure reason is the receiver's refusal — never credential material.
Flags
| Flag | Meaning |
|---|---|
--server <url> | Server base URL (default: the active context / OPSCHAIN_SERVER). |
--auth-token <token> | Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login). |
See also
opschain docs cli/admin-siem-show— the live delivery health once real events flow.