# How create watcher for ML anomalies detected **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-machine-learning\ **Created:** [January 20, 2021, 11:55am UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639 "2021-01-20T11:55:26Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![kurdit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kurdit/32/54994_2.png) [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Post date:** [January 20, 2021, 11:55am UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/1 "2021-01-20T11:55:26Z")
hi! where can I find documentation on creating and configuring watchdogs for machine learning jobs? ---
**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\ **Post date:** [January 20, 2021, 3:34pm UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/2 "2021-01-20T15:34:24Z")
You can start here: [https://www.elastic.co/blog/alerting-on-machine-learning-jobs-in-elasticsearch-v55](https://www.elastic.co/blog/alerting-on-machine-learning-jobs-in-elasticsearch-v55) It is a little dated, but still relevant. Post any follow-up questions you may have here. ---
**Author:** ![kurdit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kurdit/32/54994_2.png) [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Post date:** [January 21, 2021, 11:10am UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/3 "2021-01-21T11:10:17Z")
thank you for you reply I have ELŠ” 7.10 and for some reason I do not have a section "Create watch for real-time job" when creating machine learning jobs ---
**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\ **Post date:** [January 21, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/4 "2021-01-21T11:56:22Z")
The job has to be running in "real-time" to enable the creation of a Watch. For example, here is v7.10 Single metric job wizard right after creating a job: ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/c/8cdf92b816e588b70c921cc0336d45d88caa780c.png) The Create Watch button is disabled because the job is not running in "real-time". If I click the button to start the job, the Create Watch button becomes enabled: ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e04c56f715438581e3f4060acb70976d8e4b249f.png) and then I can create the Watch. If you "miss the opportunity" to do this during the setup wizard - don't worry. From the job management screen, when you start any datafeeds for jobs that are currently not running, you can select the job to run in real-time and then there is a checkbox to create a watch from there as well. ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/f/6ffefde3dd097da644436fb32f88d10737d96462.png) And, as the blog mentions, you can also create a watch independently from the ML UI ---
**Author:** ![kurdit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kurdit/32/54994_2.png) [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Post date:** [January 21, 2021, 1:10pm UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/5 "2021-01-21T13:10:22Z")
Thank you! I found this! Now the question is: do watchers send notifications only by email? is it possible to set up a webhook there? ---
**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\ **Post date:** [January 21, 2021, 1:54pm UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/6 "2021-01-21T13:54:54Z")
You need to manually edit the Watcher JSON configuration. See: > **[Watcher webhook action | Elasticsearch Reference \[7.10\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/actions-webhook.html)** ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 18, 2021, 1:55pm UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639/7 "2021-02-18T13:55:28Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.