Nessuscli Agent

Linux

# /opt/nessus_agent/sbin/nessuscli agent <arg1> <arg2>

Mac OS X

# /Library/NessusAgent/run/sbin/nessuscli <arg1> <arg2>

Windows

C:\Program Files\Tenable\Nessus Agent

or

C:\ProgramData\Tenable\Nessus Agent

Run cmd.exe as administrator

# nessuscli agent help

Displays a list of Nessus Agent commands.

# nessuscli bug-report-generator

Generates an archive of system diagnostics.

If you run this command without arguments, the utility prompts you for values.

Optional arguments:

--quiet: Run the bug report generator without prompting user for feedback.

--scrub: When in quiet mode, the bug report generator sanitizes the last two octets of the IPv4 address.

--full: When in quiet mode, the bug report generator collects extra data.

Using the Nessus Agent Linking Key, this command links the agent to the Nessus Manager or Tenable.io.

Required arguments:

--key=<key>

--host=<host>

--port=<port>

Optional arguments:

--name=<name>

--groups=<group1,group2,...>

Note: The agent group name is case-sensitive and must match exactly.

--ca-path=<ca_file_name>

--offline-install="yes"

--proxy-host=<host>

--proxy-port=<port>

--proxy-username=<username>

--proxy-password=<password>

--proxy-agent=<agent>

Tenable.io arguments:

--cloud

# nessuscli agent unlink

Unlinks agent from the Nessus Manager or Tenable.io.

Used to manually install a plugins set.

Required arguments:

--file=<plugins_set.tgz>

# nessuscli agent status

Displays the status of the agent, jobs pending, and if the agent is linked or not linked to server.

Optional arguments:

--local: Provides the status, current jobs count, and jobs pending. This option prevents the agent from contacting the management software that it is linked with to fetch the status. Instead, it displays the last known information from its most recent sync.

--remote: Fetches the job count from the manager and displays the status.

--offline: Provides the most recently cached agent status when it cannot connect to Nessus Manager or Tenable.io.

Updates agent hostnames automatically in Tenable.io or Nessus Manager 7.1.1 or later.

The update_hostname parameter can be set to yes or no. By default, this preference is disabled.

Tracks unique agent assets by MAC address to prevent duplicates and outdated agents from appearing in Nessus Manager if a system is reinstalled.

The track_unique_agent parameter is available in Nessus 7.1.1 and can be set to yes or no. By default, this preference is enabled.

Sets the maximum number of times an agent should retry in the event of a failure when executing the agent link, agent status, or agent unlink commands. The commands retry, the specified number of times, consecutively, sleeping increasing increments of time set by retry_sleep_milliseconds between attempts. The default value for max_retries is 0.

For example, if max_retries is set to 4, and retry_sleep_milliseconds is set to the default of 1500, then the agent will sleep for 1.5 seconds after the first try, 3 seconds after the second try, and 4.5 seconds after the third try.

Sets the number of milliseconds that an agent sleeps for between retries in event of a failure when executing the agent link, agent status, or agent unlink commands. The default is 1500 milliseconds (1.5 seconds).

# nessuscli fix --set process_priority="<value>"

# nessuscli fix --get process_priority

Optional arguments:

--set

--get

--delete