diff --git a/tests/system/test_cluster/test_agent_groups/data/guess_group_messages_master.yaml b/tests/system/test_cluster/test_agent_groups/data/guess_group_messages_master.yaml
new file mode 100644
index 0000000000..bb61075d70
--- /dev/null
+++ b/tests/system/test_cluster/test_agent_groups/data/guess_group_messages_master.yaml
@@ -0,0 +1,11 @@
+---
+wazuh-master:
+  - regex: ".*Agent 'AGENT_ID' with file 'merged.mg' MD5 .*"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 30
+  - regex: ".*Group assigned: 'GROUP_ID'"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 10
+  - regex: ".*Agent 'AGENT_ID' group is 'GROUP_ID'"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 10
diff --git a/tests/system/test_cluster/test_agent_groups/data/guess_group_messages_worker.yaml b/tests/system/test_cluster/test_agent_groups/data/guess_group_messages_worker.yaml
new file mode 100644
index 0000000000..a084c477a6
--- /dev/null
+++ b/tests/system/test_cluster/test_agent_groups/data/guess_group_messages_worker.yaml
@@ -0,0 +1,18 @@
+---
+wazuh-worker1:
+  - regex: ".*Sending message to master node: '{\"daemon_name\":\"remoted\",\"message\":{\"command\":\"assigngroup\",\"parameters\":{\"agent\":\"AGENT_ID\",\"md5\":.*"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 30
+  - regex: ".*Message received from master node: '{\"error\":0,\"message\":\"ok\",\"data\":{\"group\":\"GROUP_ID\"}}'"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 10
+  - regex: ".*Agent 'AGENT_ID' group is 'GROUP_ID'"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 10
+wazuh-master:
+  - regex: ".*Agent 'AGENT_ID' with file 'merged.mg' MD5 .*"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 30
+  - regex: ".*Group assigned: 'GROUP_ID'"
+    path: "/var/ossec/logs/ossec.log"
+    timeout: 10