APM Security

Elastic Observability APM
1

Using version 6.5.1 of APM Server, ES, and Kibana. Using SearchGuard plugin for authentication. Able to login to Kibana and ES with the SearchGuard user. When Java agent (Version 1.5.0) tries to send app metrics to the APM server it gets a Connection Refuse. Do I have to provide a username and password for the APM agent to be able to connect to the APM server? If so, how? I am using javaagent command line and the following args:

java -javaagent:PATH_TO/elastic-apm-agent-1.5.0.jar -Delastic.apm.server_urls=https://x.x.x.x:8200 -Delastic.apm.log_level=DEBUG -jar PATH_TO/MY_JAR.jar

2

same issue if i try with the http server_urls:

java -javaagent:PATH_TO/elastic-apm-agent-1.5.0.jar -Delastic.apm.server_urls=http://x.x.x.x:8200 -Delastic.apm.log_level=DEBUG -jar PATH_TO/MY_JAR.jar

3

Is there anything in the APM Server log?

4

Logs from both agent and APM server may help

5

The issue was with the SSL certificate I was using on the APM Server VIP.