The Elastic APM integration became generally available in 7.16 — see the APM Guide for updated documentation. Standalone APM Server users can see the Legacy APM Overview and Legacy APM Server Reference.
« Use environment variables in the configuration Grant users access to secured resources »
Elastic Docs ›

Secure APM Server

edit

Secure APM Server

edit

The following topics provide information about securing the APM Server process and connecting to a cluster that has security features enabled.

You can use role-based access control and optionally, API keys to grant APM Server users access to secured resources.

After privileged users have been created, use authentication to connect to a secured Elastic cluster.

For secure communication between APM Server and APM Agents, see Secure communication with APM agents.

On Linux, APM Server can take advantage of secure computing mode to restrict the system calls that a process can issue.

A reference of all available SSL configuration settings is also available.

Security Overview

edit

APM Server exposes an HTTP endpoint, and as with anything that opens ports on your servers, you should be careful about who can connect to it. Firewall rules are recommended to ensure only authorized systems can connect.

« Use environment variables in the configuration Grant users access to secured resources »