# Reporting email action failure from watcher - ELK7.8

**URL:** <https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322>\
**Category:** SIEM\
**Tags:** elastic-stack-reporting, elastic-stack-alerting\
**Created:** [March 16, 2021, 6:22am UTC](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322 "2021-03-16T06:22:20Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jancodenew](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Post date:** [March 16, 2021, 6:22am UTC](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322/1 "2021-03-16T06:22:20Z")

</div>

Hi Team,

Please help me to resolve the email action failure error mentioned below from watcher. I am using ELK version 7.8.

"id": "email\_action",  
"type": "email",  
"status": "failure",  
"error": {  
"root\_cause": [  
{  
"type": "exception",  
"reason": "Watch[6d38b55a-6e4b-498f-869f-0171675c02fc] reporting[xxx-xxx\_xxxx.csv] Error when polling pdf from host[[kibana.XXXXXX.com](http://kibana.XXXXXX.com)], port[443], method[POST], path[/api/reporting/generate/csv], status[500], body[{"message":"Reporting generation failed","reason":"Error: Request Timeout after 30000ms"}]"

---

<div class="post-metadata">

**Author:** ![jancodenew](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Post date:** [March 18, 2021, 9:15am UTC](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322/2 "2021-03-18T09:15:53Z")

</div>

@Frank_Hassanabad  
Could you please help with the above issue ?

---

<div class="post-metadata">

**Author:** ![spong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spong/32/54343_2.png) [@spong](https://discuss.elastic.co/u/spong)\
**Post date:** [March 18, 2021, 6:16pm UTC](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322/3 "2021-03-18T18:16:36Z")

</div>

Hey there @jancodenew 👋

Watcher here isn't specific to `Elastic Security/SIEM`, so I've added the `stack-alerting` and `stack-reporting` tags for additional visibility. It's worth sorting through a few of [those topics](https://discuss.elastic.co/search?q=reporting%20generation%20fail%20tags%3Astack-reporting%2Cstack-alerting) as some seem [pretty relevant](https://discuss.elastic.co/t/sending-e-mail-with-generated-report-fails/60263).

Based on

> body[{"message":"Reporting generation failed","reason":"Error: Request Timeout after 30000ms"}]"

It's sounding like your report gen is timing out, so that's a good place to start. You can either try increasing the timeout, or debugging around your report generation to see why it might be timing out. Once resolved if you're still having issues, the [watcher email action docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/actions-email.html) are probably the next best source, but please feel free to report back with additional details as someone may be able to provide more details from there. Hope this helps! 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 15, 2021, 6:16pm UTC](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322/4 "2021-04-15T18:16:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.