I try to use
java -javaagent:./jmx_prometheus_javaagent-0.11.0.jar=18080 ..
to monitor my elasticsearch JVM with GitHub - prometheus/jmx_exporter: A process for exposing JMX Beans via HTTP for Prometheus consumption
However, when the security plugin is active, curl :18080/metrics gives me tcp reset (it works before the plugin is loaded).
How can I “whitelist” this in the security plugin?