Manage Logs
Nessus has the following default log files:
- nessusd.dump — Nessus dump log file used for debugging output.
- nessusd.messages — Nessus scanner log.
- www_server.log — Nessus web server log.
- backend.log — Nessus backend log.
The following are the default log file locations for each operating system.
- Linux — /opt/nessus/var/nessus/logs/<filename>
- Mac OS X — /Library/Nessus/run/var/nessus/logs/<filename>
- Windows — C:\ProgramData\Tenable\Nessus\nessus\logs\<filename>
You can customize log file locations when you modify log settings.
To modify log settings, use one of the following methods, depending on the log file:
- Modify advanced settings - nessusd.dump, nessusd.messages
- Modify log.json - www_server.log, backend.log, custom logs
You can configure log locations and rotation strategies for www_server.log and backend.log by editing the log.json file. You can also configure custom logs by creating a new reporters[x].reporter section and creating a custom file name.
Note: You cannot configure nessusd.dump or nessusd.messages settings using log.json. Configure those log settings using logfile_rot in advanced settings.
To modify log settings using log.json:
-
Using a text editor, open the log.json file, located in the corresponding directory:
- Linux — /opt/nessus/var/nessus/log.json
- Mac OS X /Library/Nessus/run/var/nessus/log.json
- Windows — C:\ProgramData\Tenable\Nessus\nessus\log.json
-
For each log file, edit or create a reporters[x].reporter section, and add or modify the parameters described in log.json Format.
- Save the log.json file.
-
Restart the Nessus service.
The log settings are updated.
The following describe parameters in the log.json file, and whether Tenable recommends that you modify the parameter. Some parameters are advanced and usually do not need to be modified. If you are an advanced user who wants to configure a custom log file with advanced parameters, see the knowledge base article for more information.
Parameter | Default value | Can be modified? | Description |
---|---|---|---|
tags |
www_server.log: response backend.log: log, info, warn, error, trace |
yes |
Determines what log information is included in that log.
|
type | file | not recommended | Determines the type of the log file. |
rotation_strategy | size | yes |
Determines whether the log archives files based on maximum rotation size or rotation time. Valid values:
|
rotation_time | 86400 (1 day) | yes |
Rotation time in seconds. Only used if rotation_strategy is daily. |
max_size |
Nessus: 536870912 (512 MB) Agent: 10485760 (10 MB) |
yes |
Rotation size in bytes. Only used if rotation_strategy is size. |
max_files |
Nessus: Agent: 2 |
yes |
Maximum number of files allowed in the file rotation. The maximum number includes the main file, so 10 max_files is 1 main file and 9 backups. If you decrease this number, old logs are deleted. |
file |
Depends on operating system and log file |
yes |
The location and name of the log file. See Default Log Locations. If you change the name of a default Nessus log file, some advanced settings may not be able to modify the log settings. |
context | true | not recommended | Enables more context information for logs in the system format, such as backend.log. |
format | www_server.log: combined backend.log: system |
not recommended |
Determines the format of the output.
|
The following are examples of a log.json file.

{
"reporters": [
{
"tags": [
"response"
],
"reporter": {
"type": "file",
"rotation_strategy": "daily",
"rotation_time": "86400",
"max_size": "536870912",
"max_files": "1024",
"file": "/opt/nessus/var/nessus/logs/www_server.log"
},
"format": "combined"
},
{
"tags": [
"log",
"info",
"warn",
"error",
"trace"
],
"reporter": {
"type": "file",
"file": "/opt/nessus/var/nessus/logs/backend.log"
},
"context": true,
"format": "system"
}
]
}

{
"reporters": [
{
"tags": [
"response"
],
"reporter": {
"type": "file",
"rotation_strategy": "daily",
"rotation_time": "86400",
"max_size": "536870912",
"max_files": "1024",
"file": "/Library/Nessus/run/var/nessus/logs/www_server.log"
},
"format": "combined"
},
{
"tags": [
"log",
"info",
"warn",
"error",
"trace"
],
"reporter": {
"type": "file",
"file": /Library/Nessus/run/var/nessus/logs/backend.log"
},
"context": true,
"format": "system"
}
]
}

Note: The backslash (\) is a special character in JSON. To enter a backslash in a path string, you must escape the first backslash with a second backslash so the path parses correctly.
{
"reporters": [
{
"tags": [
"response"
],
"reporter": {
"type": "file",
"rotation_strategy": "daily",
"rotation_time": "86400",
"max_size": "536870912",
"max_files": "1024",
"file": "C:\\ProgramData\\Tenable\\Nessus\\nessus\\logs\\www_server.log"
},
"format": "combined"
},
{
"tags": [
"log",
"info",
"warn",
"error",
"trace"
],
"reporter": {
"type": "file",
"file": "C:\\ProgramData\\Tenable\\Nessus\\nessus\\logs\\backend.log"
},
"context": true,
"format": "system"
}
]
}