Elasticsearch watcher Error

Elastic Stack Elasticsearch
1

Below is my watcher code its simply to send report via email.

{
"trigger": {
"schedule": {
"interval": "1m"
}
},
"input": {
"none": {}
},
"condition": {
"always": {}
},
"actions": {
"email_admin": {
"email": {
"profile": "standard",
"attachments": {
"savedsearch.csv": {
"reporting": {
"url": "https://qua.observability.dsv.com/s/edi/api/reporting/generate/csv_searchsource?jobParams=(browserTimezone%3AAsia%2FCalcutta%2Ccolumns%3A!('%40timestamp'%2CSOURCE_ID%2CTRANSACTION_STATUS_REASON%2CTRANSACTION_STATUS%2CDOCUMENT_TYPE)%2CobjectType%3Asearch%2CsearchSource%3A(fields%3A!((field%3A'%40timestamp'%2Cinclude_unmapped%3Atrue)%2C(field%3ASOURCE_ID%2Cinclude_unmapped%3Atrue)%2C(field%3ATRANSACTION_STATUS_REASON%2Cinclude_unmapped%3Atrue)%2C(field%3ATRANSACTION_STATUS%2Cinclude_unmapped%3Atrue)%2C(field%3ADOCUMENT_TYPE%2Cinclude_unmapped%3Atrue))%2Cfilter%3A!((meta%3A(field%3A'%40timestamp'%2Cindex%3A'29321186-ef40-4f37-b932-8308e234c04f'%2Cparams%3A())%2Cquery%3A(range%3A('%40timestamp'%3A(format%3Astrict_date_optional_time%2Cgte%3Anow-24h%2Fh%2Clte%3Anow))))%2C('%24state'%3A(store%3AappState)%2Cmeta%3A(alias%3A!n%2Cdisabled%3A!f%2Cindex%3A'29321186-ef40-4f37-b932-8308e234c04f'%2Ckey%3ASOURCE_ID%2Cnegate%3A!f%2Cparams%3A(query%3ASEPHORA)%2Ctype%3Aphrase)%2Cquery%3A(match_phrase%3A(SOURCE_ID%3ASEPHORA))))%2Cindex%3A'29321186-ef40-4f37-b932-8308e234c04f'%2Cquery%3A(language%3Akuery%2Cquery%3A'SOURCE_ID.keyword%20%3A%20SEPHORA')%2Csort%3A!(('%40timestamp'%3A(format%3Astrict_date_optional_time%2Corder%3Adesc))))%2Ctitle%3ASEPHORA%2Cversion%3A'8.13.4')"
}
}
},
"to": [
"myemail@gmail.com"
],
"subject": "Monitoring Report"
}
}
}
}

Getting below error :

"error": {
"root_cause": [
{
"type": "s_s_l_handshake_exception",
"reason": "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
}
],
"type": "s_s_l_handshake_exception",
"reason": "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
"caused_by": {
"type": "validator_exception",
"reason": "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
"caused_by": {
"type": "sun_cert_path_builder_exception",
"reason": "unable to find valid certification path to requested target"

2

That indicates a certificate trust issue when making an outgoing connection, almost certainly the HTTPS connection to https://qua.observability.dsv.com/

There's a few different ways you could end up in that situation. The 2 most likely:

  1. https://qua.observability.dsv.com/ uses a certificate that is signed by a CA that is not trusted by your JVM.
  2. You have configured xpack.http.ssl.certifcate_authorities or xpack.http.ssl.truststore.path to trust an explicit set of CA, and the CA for https://qua.observability.dsv.com/ is not in that list.