ECE Watcher Attacments

[JamesNotJamez (James)]

Hi,
I'm trying to set up a watcher that generates an email attachment but am getting ssl handshake errors. I was wondering if there is a known limitation with doing this through ECE, I know there are some other limitations because of the way ECE handles certificates.

Here's the error

"actions": [
      {
        "id": "sachi-email",
        "type": "email",
        "status": "failure",
        "error": {
          "root_cause": [
            {
              "type": "s_s_l_handshake_exception",
              "reason": "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
            }
          ],
          "type": "s_s_l_handshake_exception",
          "reason": "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
          "caused_by": {
            "type": "validator_exception",
            "reason": "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
            "caused_by": {
              "type": "sun_cert_path_builder_exception",
              "reason": "unable to find valid certification path to requested target"
            }
          }
        }
      }
    ]

[Alex_Piggott]

It looks like you can download cert bundles and specify those to be used? https://www.elastic.co/guide/en/elasticsearch/reference/current/notification-settings.html

(For downloading cert bundles, it should be similar to this documented process: https://www.elastic.co/guide/en/cloud-enterprise/2.2/ece-securing-clusters-LDAP.html