Add pprof security docs

elastic · Nov 10, 2021 · ed16bf8 · ed16bf8
1 parent be506dd
commit ed16bf8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libbeat/docs/http-endpoint.asciidoc b/libbeat/docs/http-endpoint.asciidoc
@@ -32,7 +32,7 @@ It is recommended to use only localhost. Default is `localhost`
 current user.
 `http.named_pipe.security_descriptor`:: (Optional) Windows Security descriptor string defined in the SDDL format. Default to
 read and write permission for the current user.
-`http.pprof.enabled`:: (Optional) Enable the `/debug/pprof/` endpoints when serving HTTP. Default is `false`.
+`http.pprof.enabled`:: (Optional) Enable the `/debug/pprof/` endpoints when serving HTTP. It is recommended that this is only enabled on localhost as these endpoints may leak data. Default is `false`.
 
 This is the list of paths you can access. For pretty JSON output append `?pretty` to the URL.