@mark.quilates - This issue could be related to this Discuss topic. In a nutshell, you would need to set the from parameter in the email action in your watch implementation. You could also use the email_defaults parameter in the email account configuration in the elasticsearch.yml file.
I hope that helps.