# Elasticsearch.yml Email configuration

**URL:** <https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [January 28, 2020, 5:06am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754 "2020-01-28T05:06:29Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ali\_Coluk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ali_coluk/32/46821_2.png) [@Ali\_Coluk](https://discuss.elastic.co/u/Ali_Coluk)\
**Post date:** [January 28, 2020, 5:06am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/1 "2020-01-28T05:06:29Z")

</div>

Hello everyone,

I am trying to configure Watcher and send an email and/or slack messages. To do this I know that I need to configure the elasticsearch.yml file and add an email sender. But after my configuration, as you can see below, I can't even able to start elasticsearch service in the RockNSM suite. Can you please help me about the configuration below? Is there something wrong?

cluster.name: rocknsm  
node.name: localhost  
path.data: /data/elasticsearch  
path.logs: /var/log/elasticsearch  
bootstrap.memory\_lock: true  
network.host: _local:ipv4_  
discovery.zen.minimum\_master\_nodes: 1

discovery.type: single-node

action.auto\_create\_index: True  
action.destructive\_requires\_name: true

# Node Roles

node.master: true  
node.data: true  
node.ingest: true

watcher.actions.slack.service:  
account:  
monitoring:  
url: [https://hooks.slack.com/services/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](https://hooks.slack.com/services/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)  
message\_defaults:  
from: Watcher  
xpack.notification.email.account:  
outlook\_account:  
profile: outlook  
smtp:  
auth: true  
starttls.enable: true  
host: [smtp-mail.outlook.com](http://smtp-mail.outlook.com)  
port: 587  
user: [aaa@outlook.com](mailto:aaa@outlook.com)  
password: bbb

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [January 28, 2020, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/2 "2020-01-28T11:58:37Z")

</div>

please do not paste configuration files in here. Either use proper formatting (this forum uses markdown) or put it in a gist. This way the indentation gets lost, which makes it impossible to debug your issue.

Also, sharing the output of starting elasticsearch along with specifying the elasticsearch version would help **a lot**.

Thanks!

---

<div class="post-metadata">

**Author:** ![Ali\_Coluk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ali_coluk/32/46821_2.png) [@Ali\_Coluk](https://discuss.elastic.co/u/Ali_Coluk)\
**Post date:** [February 5, 2020, 1:56am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/3 "2020-02-05T01:56:45Z")

</div>

Hello Alexander,

Thank you for your return, I solve the sending slack message part but still have problem with sending an email. You can find the exact formatting below. You can also find the version below;  
"minimum\_wire\_compatibility\_version" : "6.7.0",  
"minimum\_index\_compatibility\_version" : "6.0.0-beta1"

![arp-a](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea8f905f5459e2bf920b1c6d7c7a76de795a2574.png)

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [February 5, 2020, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/4 "2020-02-05T09:16:47Z")

</div>

what exactly is the problem? the account cannot be found or something else? Did you restart all nodes?

---

<div class="post-metadata">

**Author:** ![Ali\_Coluk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ali_coluk/32/46821_2.png) [@Ali\_Coluk](https://discuss.elastic.co/u/Ali_Coluk)\
**Post date:** [February 13, 2020, 3:58am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/5 "2020-02-13T03:58:19Z")

</div>

So the final situation is, even can't start elasticsearch service when I don't put additional command for sending email and slack message. My elasticsearch.yml file configuration and systemctl status elasticsearch -l command output are in below.

Elasticsearch.yml configuration:

cluster.name: rocknsm  
node.name: localhost  
path.data: /data/elasticsearch  
path.logs: /var/log/elasticsearch  
bootstrap.memory\_lock: true  
network.host: _local:ipv4_  
discovery.zen.minimum\_master\_nodes: 1

discovery.type: single-node

action.auto\_create\_index: True  
action.destructive\_requires\_name: true

# Node Roles

node.master: true  
node.data: true  
node.ingest: true  
~ ~

systemctl status elasticsearch -l command output;

elasticsearch.service - Elasticsearch  
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)  
Drop-In: /etc/systemd/system/elasticsearch.service.d  
└─override.conf  
Active: failed (Result: exit-code) since Thu 2020-02-13 03:42:45 UTC; 7min ago  
Docs: [http://www.elastic.co](http://www.elastic.co)  
Process: 11096 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)  
Main PID: 11096 (code=exited, status=1/FAILURE)

Feb 13 03:42:45 localhost elasticsearch[11096]: at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:150)  
Feb 13 03:42:45 localhost elasticsearch[11096]: at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)  
Feb 13 03:42:45 localhost elasticsearch[11096]: at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)  
Feb 13 03:42:45 localhost elasticsearch[11096]: at org.elasticsearch.cli.Command.main(Command.java:90)  
Feb 13 03:42:45 localhost elasticsearch[11096]: at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:115)  
Feb 13 03:42:45 localhost elasticsearch[11096]: at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)  
Feb 13 03:42:45 localhost elasticsearch[11096]: Refer to the log for complete error details.  
Feb 13 03:42:45 localhost systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE  
Feb 13 03:42:45 localhost systemd[1]: Unit elasticsearch.service entered failed state.  
Feb 13 03:42:45 localhost systemd[1]: elasticsearch.service failed.

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [February 13, 2020, 8:03am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/6 "2020-02-13T08:03:02Z")

</div>

Please share more information, like the logfiles, and share the **exact, complete** configuration file in a gist (as the indendation is important). Otherwise it will be impossible to help.

See also [https://www.elastic.co/guide/en/elasticsearch/reference/7.5/starting-elasticsearch.html#start-es-deb-systemd](https://www.elastic.co/guide/en/elasticsearch/reference/7.5/starting-elasticsearch.html#start-es-deb-systemd)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 12, 2020, 8:03am UTC](https://discuss.elastic.co/t/elasticsearch-yml-email-configuration/216754/7 "2020-03-12T08:03:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
