Securing REST APIs

Using Session Monitor REST API, you can access most Operations Monitor features through HTTPs REST calls.

By default, Session Monitor REST APIs are not secured. When you use REST APIs to access Operations Monitor features, use your API key.

Follow these guidelines to secure your API key:

  • Store the API key on an external system which has restricted access.

  • Perform only secured backups of the external system where the API key is stored.

  • Do not pass the API key on the command line.

  • Change the API key regularly.

See Operations Monitor User's Guide for more information about how to enable and generate your API Key.