TOC & Recently Viewed

Recently Viewed Topics

Nessuscli Agent

Use the Agent nessuscli utility to perform some Nessus Agent functions through a command line interface.

Note: You must run all Agent nessuscli commands as a user with administrative privileges.

Nessuscli Agent Syntax

Operating System



# /opt/nessus_agent/sbin/nessuscli <cmd> <arg1> <arg2>

Mac OS X

# /Library/NessusAgent/run/sbin/nessuscli <cmd> <arg1> <arg2>


C:\Program Files\Tenable\Nessus Agent\nessuscli.exe

Nessuscli Commands

Command Description
Help Commands

# nessuscli help

Displays a list of Nessus commands.

Bug Reporting Commands

# nessuscli bug-report-generator

Generates an archive of system diagnostics.

If you run this command without arguments, the utility prompts you for values.

Optional arguments:

--quiet: Run the bug report generator without prompting user for feedback.

--scrub: When in quiet mode, the bug report generator sanitizes the last two octets of the IPv4 address.

--full: When in quiet mode, the bug report generator collects extra data.

Local Agent Commands

Used to link, unlink, and display agent status

# nessuscli agent link --key=<key> --host=<host> --port=<port>

Using the Nessus Agent Linking Key, this command links the agent to the Nessus Manager or

Required arguments:




Optional arguments:



Note: The agent group name is case-sensitive and must match exactly.







--proxy-agent=<agent> arguments:


# nessuscli agent unlink

Unlinks agent from the Nessus Manager or

# nessuscli agent update

Used to manually install a plugins set.

Required arguments:


# nessuscli agent status

Displays the status of the agent, jobs pending, and if the agent is linked or not linked to server.

Optional arguments:

--local: Provides the status, current jobs count, and jobs pending. This option prevents the agent from contacting the management software that it is linked with to fetch the status. Instead, it displays the last known information from its most recent sync.

--remote: Fetches the job count from the manager and displays the status.

--offline: Provides the most recently cached agent status when it cannot connect to Nessus Manager or

Fix Commands
# nessuscli fix --set update_hostname="<value>"

Updates agent hostnames automatically in or Nessus Manager 7.1.1 or later.

The update_hostname parameter can be set to yes or no. By default, this preference is disabled.

Note: Restart the agent service for the change to take effect in Nessus Manager.

# nessuscli fix --set track_unique_agents="<value>"

Tracks unique agent assets by MAC address to prevent duplicates and outdated agents from appearing in Nessus Manager if a system is reinstalled.

The track_unique_agent parameter is available in Nessus 7.1.1 and can be set to yes or no. By default, this preference is enabled.

# nessuscli fix --set max_retries="<value>"

Sets the maximum number of times an agent should retry in the event of a failure when executing the agent link, agent status, or agent unlink commands. The commands retry, the specified number of times, consecutively, sleeping increasing increments of time set by retry_sleep_milliseconds between attempts. The default value for max_retries is 0.

For example, if max_retries is set to 4, and retry_sleep_milliseconds is set to the default of 1500, then the agent will sleep for 1.5 seconds after the first try, 3 seconds after the second try, and 4.5 seconds after the third try.

Note: This setting does not affect offline updates or the agent's normal 24 hour check-in after it is linked.
# nessuscli fix --set retry_sleep_milliseconds="<value>"

Sets the number of milliseconds that an agent sleeps for between retries in event of a failure when executing the agent link, agent status, or agent unlink commands. The default is 1500 milliseconds (1.5 seconds).

nessuscli fix --secure --list Displays a list of agent settings and their values.
Resource Control Commands  

# nessuscli fix --set process_priority="<value>"

# nessuscli fix --get process_priority

Optional arguments:




Note: See Agent CPU Resource Control in the Nessus Agent Deployment and User Guide for <value> preference options

Copyright © 2020 Tenable, Inc. All rights reserved. Tenable,, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable,Inc., Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.