Reduce Agent Accumulation in Tenable Sensor Proxy

Environments that deploy and decommission agents frequently (short-lived or ephemeral agents) can accumulate inactive agent records in Tenable Sensor Proxy. By default, Tenable Sensor Proxy retains inactive agents for 21 days. If retained agent tokens exceed Tenable Vulnerability Management's 100,000-token limit, bulk polling requests fail and active agents cannot retrieve jobs.

Note: In Tenable Sensor Proxy 1.4.0 and later, agent data is automatically deleted when an agent is unlinked.

To reduce this risk, lower the AgentAgeOutDays value in /opt/sensor_proxy/config/sidecar.json.

Note: This process requires root access.

To configure agent age-out:

  1. In your system file manager, navigate to /opt/sensor_proxy/config/.

  2. Open sidecar.json.

  3. Set AgentAgeOutDays to a value lower than the default of 21. For example:

    "AgentAgeOutDays": 7

  4. Save your file changes.

  5. Restart Tenable Sensor Proxy to apply the change.

    Tip: You can run the following command to verify the number of connected agents:

    /opt/sensor_proxy/sbin/configure -agent-ca-report