Type to search.

APM Config extension

Serverless Observability

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Stack

The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

The APM Config extension (apmconfigextension) enables central configuration for EDOT SDKs through the Open Agent Management Protocol (OpAMP). It establishes a control channel between Elastic Agent and an OpAMP-enabled APM Server endpoint so that configuration updates can be retrieved and delivered dynamically to connected SDKs.

The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Generally available since 9.1 This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. This extension is required when using the Central Configuration feature for EDOT SDKs.

For full contrib details, refer to the OpenTelemetry apmconfigextension documentation.

The extension acts as an OpAMP client, opening a bidirectional control channel to the OpAMP endpoint exposed by APM Server. Through this channel:

  1. The Collector requests configuration bundles for connected EDOT SDKs.
  2. The configuration server sends updates based on user changes in the Applications UI.
  3. Updated configuration is distributed to EDOT SDKs using OpAMP-supported mechanisms.

The extension does not modify telemetry or manage pipelines. Its sole purpose is configuration synchronization.

Common scenarios where the APM Config extension is required:

  • Central configuration for EDOT SDKs. Enables dynamic updates to sampling, attribute collection, security settings, and custom SDK options.

  • Standalone Elastic Agent deployments. The extension can connect directly to the APM Server OpAMP endpoint.

  • Managing large fleets of instrumented services. Allows consistent and centralized control of SDK configuration without requiring application restarts.

Note

Integration with Fleet Server (Fleet OpAMP endpoint) is not available at this time.

The following examples show how to configure the APM Config extension for different deployment scenarios:

YAML
extensions:
  bearertokenauth:
    scheme: "APIKey"
    token: "<ENCODED_ELASTICSEARCH_APIKEY>"

  apmconfig:
    opamp:
      protocols:
        http:
          endpoint: "https://apm.example.com:8200/opamp"

    source:
      elasticsearch:
        endpoint: "<ELASTICSEARCH_ENDPOINT>"
        auth:
          authenticator: bearertokenauth

service:
  extensions: [bearertokenauth, apmconfig]

You can configure timeouts or connection behavior:

YAML
extensions:
  apmconfig:
    opamp:
      protocols:
        http:
          endpoint: "https://apm.example.com:8200/opamp"
          timeout: 30s
          tls:
            insecure_skip_verify: false

The following are the most important settings when configuring the APM Config extension:

Option Description
opamp.protocols.http.endpoint The OpAMP server endpoint. Required for standalone deployments.
opamp.protocols.http.headers HTTP headers used for authentication, such as API keys.
opamp.protocols.http.tls TLS options, including certificate verification behavior.
opamp.protocols.http.timeout Timeout for OpAMP communication.
Note

The endpoint must point to an OpAMP-enabled APM Server Server. Standard ingest or OTLP endpoints will not work.

For the complete list of configuration options, refer to the contrib apmconfigextension documentation.