The New Relic Ruby agent default security settings automatically provide security for your APM data to ensure data privacy and to limit the kind of information New Relic receives. You may have business reasons to change these settings.
If you want to restrict the information that New Relic receives, you can enable high-security mode. If high-security mode or the default settings do not work for your business needs, you can apply custom settings.
Default security settings
By default, here is how the New Relic Ruby agent handles the following potentially sensitive data:
- Request parameters: The agent does not capture HTTP request parameters.
- HTTPS: The agent communicates with New Relic using HTTPS.
- SQL: The agent sets SQL recording to
obfuscated, which removes the potentially sensitive numeric and string literal values.
High-security mode settings
Custom security settings
If you customize security settings, it may impact the security of your application.
If you need different security settings than default or high-security mode, you can customize these settings:
- Ruby agent configuration file
- Custom attributes
- Ruby agent API
- Custom instrumentation
- Custom SSL certificates
Effects on data security
By default, the agent does not log all data sent to New Relic in the agent log file.
If you set this to
Some proxies default to using HTTP, which is a less secure protocol.
By default, you are sending attributes to New Relic. If you do not want to send attributes to New Relic, set this to
If there are specific attribute keys that you do not want to send to New Relic in transaction traces, identify them using
Consider if you want to exclude these potentially sensitive attributes using
Default: the value of the
By default, this is set to
If you are not using high-security mode but still want to strip messages from all exceptions except those in your allow list, set this to