# Hipchat Integration Errors

**URL:** <https://discuss.elastic.co/t/hipchat-integration-errors/59321>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [August 30, 2016, 2:27pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321 "2016-08-30T14:27:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![denton64](https://avatars.discourse-cdn.com/v4/letter/d/258eb7/32.png) [@denton64](https://discuss.elastic.co/u/denton64)\
**Post date:** [August 30, 2016, 2:27pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321/1 "2016-08-30T14:27:41Z")

</div>

Hey there,

I have recently been working with setting up Watches for my company. Now that my bELK stack is in production, I would like to separate the apache errors that we are receiving into two distinct rooms. One for dev errors and one for prod. When I scripted the change using puppet, things were not working properly. Below is the following configurations and the error I am receiving:

_elasticsearch.yml:_

```auto
path.data: /usr/share/elasticsearch/data/es-01
path.logs: /var/log/elasticsearch/es-01
network.host: 0.0.0.0
http.port: 9200
watcher.actions.hipchat.service:
   account:
     notify-dev-monitoring:
       profile: integration
       auth_token: 0vJKWV96XQVCiOp2GhkHhWALxmxF9BHNfnqObBTW
       room: testmon

```

_Hipchat Settings:_

```auto
Token: 0vJKWV96XQVCiOp2GhkHhWALxmxF9BHNfnqObBTW
Label: test
Scopes: Send Notification

```

_curl:_

```auto
curl -XPUT 'localhost:9200/_watcher/watch/api-error' -d '{
      "trigger" : {
          "schedule" : { "interval" : "10s" } 
        },
        "input" : {
          "search" : {
            "request" : {
              "indices" : ["filebeat"],
              "body" : {
                "query" : {
                  "filtered" : {
                    "query" : {
                  "match_phrase" : { "source": "/var/www/html/logs/error_log" }
                  },
                  "filter" : {
                    "bool": {
                    "must": [
                    {
                      "range": {
                        "@timestamp" : {
                        "from" : "now-5m",
                        "to" : "now"
                        }
                      }
                    }
                    ]
                  }
                }
              }
            }
          }
          }
          }
        },
        "actions" : {
        "notify-hipchat" : {
          "throttle_period" : "5m",
          "hipchat" : {
            "account" : "notify-dev-monitoring",
            "message" : {
              "body": "New error seen in api apache error_log!\n\nHost: {{ctx.payload.hits.hits.0._source.beat.hostname}}\nMessage: {{ctx.payload.hits.hits.0._source.message}}",
              "format" : "text",
              "color" : "red",
              "notify" : true
            }
          }
        }
      }
      }'

```

_Error received:_

```auto
{"error":{"root_cause":[{"type":"parse_exception","reason":"could not parse [hipchat] action [api-error/null]. unknown hipchat account [notify-dev-monitoring]"}],"type":"parse_exception","reason":"could not parse [hipchat] action [api-error/null]. unknown hipchat account [notify-dev-monitoring]"},"status":400}

```

Noting the status=400, I realize it is on the client side. The weird part is, if I keep _elasticsearch.yml_ the same as above, but change the curl to the old account name, it works and will continue to send to the existing channel. After changing the configs, I restart the service so not sure why it is cached and not recognizing the new config.

_Watcher version:_ 2.3.5

---

<div class="post-metadata">

**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\
**Post date:** [August 30, 2016, 7:49pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321/2 "2016-08-30T19:49:58Z")

</div>

Watcher executes on the currently elected master node, so when you make changes to the elasticsearch.yml , you will effectively need a full cluster restart (or at least a complete rolling restart of all master-eligible nodes.

Restarting a single node in a multi-node cluster isn't likely to do the trick!

---

<div class="post-metadata">

**Author:** ![denton64](https://avatars.discourse-cdn.com/v4/letter/d/258eb7/32.png) [@denton64](https://discuss.elastic.co/u/denton64)\
**Post date:** [August 30, 2016, 8:04pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321/3 "2016-08-30T20:04:51Z")

</div>

Steve,

Thanks for the response! Unfortunately, I only have a single cluster set up. This is why I am at a loss!

---

<div class="post-metadata">

**Author:** ![denton64](https://avatars.discourse-cdn.com/v4/letter/d/258eb7/32.png) [@denton64](https://discuss.elastic.co/u/denton64)\
**Post date:** [August 30, 2016, 9:22pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321/4 "2016-08-30T21:22:35Z")

</div>

Seems like it was due to the cluster status being red. Deleted all indexes and things started working properly. Obviously, this shouldn't be the case as we would like keeping data. Looking for suggestions on how to approach this problem in a different light. 1 cluster.. 1 node.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:43pm UTC](https://discuss.elastic.co/t/hipchat-integration-errors/59321/5 "2017-07-06T13:43:20Z")

</div>