From 72fb529db65f81eda13edb3f7563cb62355467fc Mon Sep 17 00:00:00 2001 From: Takuro Ashie Date: Fri, 21 Aug 2026 13:17:32 +0900 Subject: [PATCH] docs: warn about monitor agent bind exposure Signed-off-by: Takuro Ashie --- input/monitor_agent.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/input/monitor_agent.md b/input/monitor_agent.md index f3b6b448..de8b1d5c 100644 --- a/input/monitor_agent.md +++ b/input/monitor_agent.md @@ -87,6 +87,13 @@ The port to listen to. The bind address to listen to. +{% hint style='danger' %} +The default value `0.0.0.0` makes the monitor agent listen on all network +interfaces. The monitor agent does not provide an authentication mechanism, +so restrict access to the monitor port to trusted networks and clients. If +remote access is not required, set this parameter to `127.0.0.1`. +{% endhint %} + ### `tag` | type | default | version |