Configuration Overview & sentinel-agent.toml
Edit ArticleA plain-language guide to every setting inside the Sentinel agent configuration file.
Sentinel Operations Team
5 min read
Updated August 28, 2026
v3.2The Sentinel agent configuration is stored in a clean, human-readable file named **sentinel-agent.toml** located at `C:\Program Files\Sentinel\config\sentinel-agent.toml` on Windows (or `/etc/sentinel/sentinel-agent.toml` on Linux).
sentinel-agent.toml
1[server]2# The HTTPS address of your central Sentinel management server3base_url = "https://endpoint.yourcompany.com"4connect_timeout_secs = 105request_timeout_secs = 3067[agent]8# How often the agent pings the server (in seconds)9heartbeat_interval_secs = 6010# How often the agent checks for updated security policies (in seconds)11policy_sync_interval_secs = 30012# Local working directory for encrypted database and logs13data_dir = "C:\\ProgramData\\Sentinel"1415[queue]16# Offline SQLite database path17db_path = "C:\\ProgramData\\Sentinel\\events.db"18# Maximum events uploaded in a single batch19batch_size = 10020# Upload frequency for telemetry logs (in seconds)21upload_interval_secs = 302223[monitors]24# How often to check active foreground applications (in seconds)25activity_poll_interval_secs = 526# How often to audit browser history (in seconds)27website_poll_interval_secs = 302829[logging]30# Log detail level: "error", "warn", "info", "debug"31level = "info"32directory = "C:\\ProgramData\\Sentinel\\logs"
| Section | Parameter | Default Value | What It Does |
|---|---|---|---|
| [server] | base_url | Required URL | The central Sentinel server address where all data is securely sent. |
| [agent] | heartbeat_interval_secs | 60 seconds | Interval between "I am alive" pings. Lower values show faster online/offline status in console. |
| [monitors] | activity_poll_interval_secs | 5 seconds | Frequency of foreground application tracking. 5s gives high precision with negligible CPU. |
| [monitors] | website_poll_interval_secs | 30 seconds | Frequency of browser URL checking for Chrome, Edge, and Firefox. |
Tags:#Configuration#TOML#Settings Guide
Was this documentation page helpful?
Your technician feedback helps our team continuously improve Sentinel guides.

