# Status Failure for Slack | Watcher

**URL:** <https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086>\
**Category:** Elasticsearch\
**Created:** [August 21, 2019, 10:32am UTC](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086 "2019-08-21T10:32:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ntran](https://avatars.discourse-cdn.com/v4/letter/n/73ab20/32.png) [@ntran](https://discuss.elastic.co/u/ntran)\
**Post date:** [August 21, 2019, 10:32am UTC](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086/1 "2019-08-21T10:32:25Z")

</div>

Hi,

My slack message is failing and I was hoping someone could help me with figuring out why.

// Action statement thus far

```
  "actions": {
    "notify-slack": {
      "throttle_period": "5m",
      "slack": {
        "message": {
          "from": "Alert",
          "to": [
            "#alert-test-channel"
          ],
          "text": """
  {{#ctx.payload.array_new}}
  {{key}} has not been sent logs in the last 5 minutes (facepalm).
  {{/ctx.payload.array_new}}
  """
        }
      }
    }
  }
}

```

// Executed output (from action onwards)

```
"actions" : [
    {
      "id" : "notify-slack",
      "type" : "slack",
      "status" : "failure",
      "slack" : {
        "account" : "monitoring",
        "sent_messages" : [
          {
            "status" : "failure",
            "request" : {
              "host" : "hooks.slack.com",
              "port" : -1,
              "scheme" : "https",
              "method" : "post",
              "headers" : {
                "Content-Type" : "application/json; charset=UTF-8"
              },
              "body" : """{"channel":"#alert-test-channel","username":"Alert","text":" EXPO has not been sent logs in the last 5 minutes (facepalm).\n"}"""
            },
            "response" : {
              "status" : 403,
              "headers" : {
                "x-amz-cf-pop" : [
                  "FJR50-C1"
                ],
                "date" : [
                  "Wed, 21 Aug 2019 10:28:11 GMT"
                ],
                "server" : [
                  "Apache"
                ],
                "transfer-encoding" : [
                  "chunked"
                ],
                "vary" : [
                  "Accept-Encoding"
                ],
                "x-frame-options" : [
                  "SAMEORIGIN"
                ],
                "x-via" : [
                  "haproxy-www-w230"
                ],
                "strict-transport-security" : [
                  "max-age=31536000; includeSubDomains; preload"
                ],
                "via" : [
                  "1.1 fea27bc7c6b866014db45f720775ef94.cloudfront.net (CloudFront)"
                ],
                "access-control-allow-origin" : [
                  "*"
                ],
                "referrer-policy" : [
                  "no-referrer"
                ],
                "connection" : [
                  "keep-alive"
                ],
                "content-type" : [
                  "text/html"
                ],
                "x-cache" : [
                  "Error from cloudfront"
                ],
                "x-amz-cf-id" : [
                  "O8L115hV90-tuaPWh0GgqeEaiAZK0kVT4THAxbENOgwfx7SpGZ-7ZQ=="
                ]
              },
              "body" : "invalid_token"
            },
            "to" : "#alert-test-channel",
            "message" : {
              "from" : "Alert",
              "text" : " EXPO has not been sent logs in the last 5 minutes (facepalm).\n"
            }
          }
        ]
      }
    }
  ]
},
"messages" : []
  }
}

```

Thank you in advance 🙂

---

<div class="post-metadata">

**Author:** ![ntran](https://avatars.discourse-cdn.com/v4/letter/n/73ab20/32.png) [@ntran](https://discuss.elastic.co/u/ntran)\
**Post date:** [August 21, 2019, 10:47am UTC](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086/2 "2019-08-21T10:47:40Z")

</div>

I've changed the action a bit, however, I am still getting the same error message

// Action

```
  "actions": {
    "notify-slack": {
      "throttle_period": "5m",
      "slack": {
        "message": {
          "from": "Alert",
          "to": [
            "#alert-test-channel"
          ],
          "text": "Alert:\n{{#ctx.payload.array_new}}\"{{key}}\" has not been sent any logs in the past 5 minutes.\n\n{{/ctx.payload.array_new}}"
        }
      }
    }
  }
}
```

---

<div class="post-metadata">

**Author:** ![ntran](https://avatars.discourse-cdn.com/v4/letter/n/73ab20/32.png) [@ntran](https://discuss.elastic.co/u/ntran)\
**Post date:** [August 21, 2019, 1:06pm UTC](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086/3 "2019-08-21T13:06:54Z")

</div>

Found the solution

I had to reset my webhook url

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 18, 2019, 1:06pm UTC](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086/4 "2019-09-18T13:06:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.