Hey,
it's actually no rocket science. One of the reason I was asking so hard for the execute watch API output is the fact, that you can see in the input.result.payload field the whole data structure that you are able to access.
As you can see, there is no TargetUserName.keyword.
This blog post might help to establish a solid workflow when writing and developing watches:
--Alex