# ECE Watcher Attacments

**URL:** <https://discuss.elastic.co/t/ece-watcher-attacments/178589>\
**Category:** Elastic Cloud Enterprise (ECE)\
**Tags:** elastic-stack-alerting\
**Created:** [April 26, 2019, 8:43am UTC](https://discuss.elastic.co/t/ece-watcher-attacments/178589 "2019-04-26T08:43:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JamesNotJamez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesnotjamez/32/45736_2.png) [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\
**Post date:** [April 26, 2019, 8:43am UTC](https://discuss.elastic.co/t/ece-watcher-attacments/178589/1 "2019-04-26T08:43:31Z")

</div>

Hi,  
I'm trying to set up a watcher that generates an email attachment but am getting ssl handshake errors. I was wondering if there is a known limitation with doing this through ECE, I know there are some other limitations because of the way ECE handles certificates.

Here's the error

```auto
"actions": [
      {
        "id": "sachi-email",
        "type": "email",
        "status": "failure",
        "error": {
          "root_cause": [
            {
              "type": "s_s_l_handshake_exception",
              "reason": "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
            }
          ],
          "type": "s_s_l_handshake_exception",
          "reason": "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
          "caused_by": {
            "type": "validator_exception",
            "reason": "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
            "caused_by": {
              "type": "sun_cert_path_builder_exception",
              "reason": "unable to find valid certification path to requested target"
            }
          }
        }
      }
    ]

```

---

<div class="post-metadata">

**Author:** ![Alex\_Piggott](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_piggott/32/11053_2.png) [@Alex\_Piggott](https://discuss.elastic.co/u/Alex_Piggott)\
**Post date:** [April 26, 2019, 1:54pm UTC](https://discuss.elastic.co/t/ece-watcher-attacments/178589/2 "2019-04-26T13:54:09Z")

</div>

It looks like you can download cert bundles and specify those to be used? [https://www.elastic.co/guide/en/elasticsearch/reference/current/notification-settings.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/notification-settings.html)

(For downloading cert bundles, it should be similar to this documented process: [https://www.elastic.co/guide/en/cloud-enterprise/2.2/ece-securing-clusters-LDAP.html](https://www.elastic.co/guide/en/cloud-enterprise/2.2/ece-securing-clusters-LDAP.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 10, 2019, 1:54pm UTC](https://discuss.elastic.co/t/ece-watcher-attacments/178589/3 "2019-05-10T13:54:10Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.