# Advanced Watch **URL:** \ **Category:** Kibana\ **Created:** [July 20, 2023, 8:25pm UTC](https://discuss.elastic.co/t/advanced-watch/338906 "2023-07-20T20:25:03Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Kumar\_Abhinav](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kumar_abhinav/32/122208_2.png) [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Post date:** [July 20, 2023, 8:25pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/1 "2023-07-20T20:25:03Z")
Hi, I am using ELK in Supply Chain Traceability Company. 1 -- I wanted to create a Watcher to send "Alerts" from Kibana for the inventory items and it should be continuous alerts through email notification. Suppose an item has an expiry date of July 30th so on July 1st, the first email should pop out from the system, then a second on July 15th, another on July 22nd, and from July 23rd, continuous email(every day) mail should be sent to the clients. 2 -- I also want to put a watcher on the inventory count limit. Suppose it goes beyond a threshold limit, an alert from the system should pop out. Can you please guide me that how to integrate in kibana also can it be done through the "Alerts" or through the "Watcher" ---
**Author:** ![Kumar\_Abhinav](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kumar_abhinav/32/122208_2.png) [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Post date:** [August 3, 2023, 8:22pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/2 "2023-08-03T20:22:19Z")
Can any one reply to this query ---
**Author:** ![drewdaemon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/drewdaemon/32/97779_2.png) [@drewdaemon](https://discuss.elastic.co/u/drewdaemon)\ **Post date:** [August 3, 2023, 9:59pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/3 "2023-08-03T21:59:55Z")
@Kumar_Abhinav have you looked at the [watcher docs](https://www.elastic.co/guide/en/kibana/current/watcher-ui.html)? It seems like the examples there are very similar to your use cases, including sending alerts via email. ---
**Author:** ![Kumar\_Abhinav](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kumar_abhinav/32/122208_2.png) [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Post date:** [August 14, 2023, 7:33pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/4 "2023-08-14T19:33:50Z")
Hi @drewdaemon. I looked into the Watcher docs and found some ways to configure the email setting in the kibana.yml file. However I did not find any such setting space in that file and when I created the same on my own, my kibana stopped working. FYI - I used this setting xpack.actions.email.smtp.host: xxx.xxx.xxx.xx xpack.actions.email.smtp.port: 25 xpack.actions.email.smtp.secure: False xpack.actions.email.smtp.username: [xxx\_xxx-xxxx-xxxx2@xxx.net](mailto:xxx_xxx-xxxx-xxxx2@xxx.net) xpack.actions.email.smtp.password: xxx\_1234 Please guide me on this again. I will be very grateful to you for this. Thanks Abhinav ---
**Author:** ![Kumar\_Abhinav](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kumar_abhinav/32/122208_2.png) [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Post date:** [August 17, 2023, 9:07pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/5 "2023-08-17T21:07:34Z")
Request Someone to give some guidance on this ---
**Author:** ![Kumar\_Abhinav](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kumar_abhinav/32/122208_2.png) [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Post date:** [August 21, 2023, 6:30am UTC](https://discuss.elastic.co/t/advanced-watch/338906/6 "2023-08-21T06:30:31Z")
Hi @drewdaemon . Request you guide me on this. ---
**Author:** ![drewdaemon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/drewdaemon/32/97779_2.png) [@drewdaemon](https://discuss.elastic.co/u/drewdaemon)\ **Post date:** [September 5, 2023, 4:30pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/7 "2023-09-05T16:30:47Z")
Hi @Kumar_Abhinav I'm curious what directions you were following when you started adding settings to the `kibana.yml` config file. As far as I can see in the doc [here](https://www.elastic.co/guide/en/kibana/current/watcher-ui.html#_add_an_action), you don't need to change anything in `kibana.yml`. However, as it mentions there, you do need to [configure an email account in Elasticsearch](https://www.elastic.co/guide/en/elasticsearch/reference/8.9/actions-email.html#configuring-email). Does that help? ---
**Author:** ![Kumar\_Abhinav](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kumar_abhinav/32/122208_2.png) [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Post date:** [September 5, 2023, 9:30pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/8 "2023-09-05T21:30:01Z")
Hi @drewdaemon Thanks for the message. After posting the message in the Community, I made these changes in the Elastic.yml file -- xpack.notification.email.account: outlook\_account: profile: outlook smtp: auth: true starttls.enable: true host: [smtp-mail.outlook.com](http://smtp-mail.outlook.com) port: 587 user: \ In the User Name - I gave my personal email ID for trial purposes. I got this as an error message - 2023-08-23T06:32:59,971][ERROR][o.e.x.w.a.e.ExecutableEmailAction] [nhra-prod2-es-kibana] failed to execute action [dcd9bba3-a4ad-4932-9c8a-560dcabf1248/email\_1] javax.mail.MessagingException: failed to send email with subject [Watch [Expiry] has exceeded the threshold] via account [outlook\_account] at org.elasticsearch.xpack.watcher.notification.email.EmailService.send(EmailService.java:278) ~[?:?] at org.elasticsearch.xpack.watcher.notification.email.EmailService.send(EmailService.java:238) ~[?:?] at org.elasticsearch.xpack.watcher.actions.email.ExecutableEmailAction.execute(ExecutableEmailAction.java:92) ~[?:?] at org.elasticsearch.xpack.core.watcher.actions.ActionWrapper.execute(ActionWrapper.java:175) ~[?:?] at org.elasticsearch.xpack.watcher.execution.ExecutionService.executeInner(ExecutionService.java:560) ~[?:?] at org.elasticsearch.xpack.watcher.execution.ExecutionService.execute(ExecutionService.java:342) ~[?:?] at org.elasticsearch.xpack.watcher.execution.ExecutionService.lambda$executeAsync$6(ExecutionService.java:440) ~[?:?] at org.elasticsearch.xpack.watcher.execution.ExecutionService$WatchExecutionTask.run(ExecutionService.java:666) ~[?:?] at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:850) ~[elasticsearch-8.6.2.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) ~[?:?] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) ~[?:?] at java.lang.Thread.run(Thread.java:1589) ~[?:?] Caused by: com.sun.mail.smtp.SMTPSendFailedException: 554 5.2.252 SendAsDenied; [writetokumarabhinav@hotmail.com](mailto:writetokumarabhinav@hotmail.com) not allowed to send as elasticsearch@nhra-prod2-es-kibana; STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied; Failed to process message due to a permanent exception with message [BeginDiagnosticData]Cannot submit message. 0.35250:1F004D84, 1.36674:0A000000, 1.61250:00000000, 1.45378:02000000, 1.44866:767C0000, 1.36674:0E000000, 1.61250:00000000, 1.45378:7B7C0000, 1.44866:08010000, 16.55847:910F0000, 17.43559:0000000024020000000000000000000000000000, 20.52176:140F2B9A1A0010100D000000, 20.50032:140F2B9A8A17001007000000, 0.53414:F1030000, 0.35180:00000000, 255.23226:1F004D84, 255.27962:0A000000, 255.27962:0E000000, 255.31418:6E930000, 0.35250:FF7F0000, 1.36674:0A000000, 1.61250:00000000, 1.45378:02000000, 1.44866:62000000, 1.36674:32000000, 1.61250:00000000, 1.45378:67000000, 1.44866:01000000, 16.55847:DD000000, 17.43559:00000000B8030000000000000000000000000000, 20.52176:140F2B9A1A004010F1030000, 20.50032:140F2B9A8A1770201F004D84, 0.53414:31000000, 0.35180:EC790000, 255.23226:D3920000, 255.27962:0A000000, 255.27962:32000000, 255.17082:DC040000, 0.27745:3B000000, 4.21921:DC040000, 255.27962:FA000000, 255.1494:40000000, 0.38698:05000780, 1.41134:46000000, 0.37692:86000000, 0.37948:86000000, 5.33852:00000000534D545000000000, 7.36354:010000000000010986000000, 4.56248:DC040000, 7.40748:010000000000010B0C000000, 7.57132:000000000000000000000000, 4.39640:DC040000, 1.63016:32000000, 8.45434:00400600A39E7D130000000000000000332D6334, 1.46798:04000000, 5.10786:0000000031352E32302E363639392E3032363A504E32503238374D42303536313A39393863386136332D633463312D343033642D386238612D6162353536613236313363633A3330313437323A2E4E455420362E302E323000000000, 7.51330:E0522DCBA2A3DB0800000000, 0.39570:13000000, 1.55954:0A000000, 1.33010:0A000000, 2.54258:00000000, 0.40002:07000000, 1.56562:00000000, 1.33010:0A000000, 2.54258:00000000, 0.40002:00000000, 1.56562:00000000, 1.64146:32000000, 1.33010:32000000, 2.54258:DC040000, 1.33010:32000000, 2.54258:DC040000, 255.1750:83020000, 255.31418:0A008281, 0.22753:92000000, 255.21817:DC040000, 0.64418:0A004982, 4.39842:DC040000, 0.41586:8D020000, 4.60547:DC040000, 0.21966:9C000000, 4.30158:DC040000[EndDiagnosticData] [[Hostname=PN2P287MB0561.INDP287.PROD.OUTLOOK.COM](http://Hostname=PN2P287MB0561.INDP287.PROD.OUTLOOK.COM)] ... I also want to take your guidance on how I should give my organization mail is which runs on the Outlook/hotmail layer and also on the issue above, how to solve this. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 3, 2023, 9:30pm UTC](https://discuss.elastic.co/t/advanced-watch/338906/9 "2023-10-03T21:30:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.