# Trying to configure the Watcher within the ELK

**URL:** <https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [March 29, 2023, 9:42am UTC](https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801 "2023-03-29T09:42:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ashwin2610](https://avatars.discourse-cdn.com/v4/letter/a/67e7ee/32.png) [@ashwin2610](https://discuss.elastic.co/u/ashwin2610)\
**Post date:** [March 29, 2023, 9:42am UTC](https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801/1 "2023-03-29T09:42:37Z")

</div>

Version: 8.6.2

Trying to configure the o365 password within keystore using the below command as defined in the doc:

bin/elasticsearch-keystore add xpack.notification.email.account.exchange\_account.smtp.secure\_password

Getting the alert elasticsearch-keystore command not found  
Any help woudl be appreciated

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [March 29, 2023, 11:00pm UTC](https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801/2 "2023-03-29T23:00:07Z")

</div>

Are you on linux? Windows? Do you realize the command needs to be run from the directory just above the `bin` directory?

For example:

```auto
bash-3.2$ pwd
/Users/richcollier/v8.6.2/elasticsearch-8.6.2
bash-3.2$ bin/elasticsearch-keystore --help
A tool for managing settings stored in the elasticsearch keystore

Commands
--------
create - Creates a new elasticsearch keystore
list - List entries in the keystore
show - Show a value from the keystore
add - Add string settings to the keystore
add-file - Add a file setting to the keystore
remove - Remove settings from the keystore
upgrade - Upgrade the keystore format
passwd - Changes the password of a keystore
has-passwd - Succeeds if the keystore exists and is password-protected, fails with exit code 1 otherwise.

Non-option arguments:
command

Option Description
------ -----------
-E <KeyValuePair> Configure a setting
-h, --help Show help
-s, --silent Show minimal output
-v, --verbose Show verbose output

```

---

<div class="post-metadata">

**Author:** ![ashwin2610](https://avatars.discourse-cdn.com/v4/letter/a/67e7ee/32.png) [@ashwin2610](https://discuss.elastic.co/u/ashwin2610)\
**Post date:** [March 30, 2023, 7:09am UTC](https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801/3 "2023-03-30T07:09:25Z")

</div>

Thanks for the response @richcollier  
Mine is a ECE setup and somehow I am not able to get the elasticsearch-keystore command to work  
I could observe 3 different locations where the keystore is created

/var/lib/docker/overlay2/17f0e8c6e95e49e7811ede3f1825d2d2ca7f93b8b6b229cef1a0054885bb13b3/diff/usr/share/elasticsearch/bin/elasticsearch-keystore  
/var/lib/docker/overlay2/bf9a571809ac1e8f1d97b5d59ca76e468ff57d9d1368ef713f44367457a79792/diff/usr/share/elasticsearch/bin/elasticsearch-keystore  
/var/lib/docker/overlay2/bf9a571809ac1e8f1d97b5d59ca76e468ff57d9d1368ef713f44367457a79792/merged/usr/share/elasticsearch/bin/elasticsearch-keystore  
[root@S1GZELKLCOR01 bin]# cd /var/lib/docker/overlay2/bf9a571809ac1e8f1d97b5d59ca76e468ff57d9d1368ef713f44367457a79792/diff/usr/share/elasticsearch/bin/

running the elasticsearch-keystore command from the /bin returns  
bash: elasticsearch-keystore: command not found...

I recently just upgraded to the v8.6.2 version from the GUI interface

---

<div class="post-metadata">

**Author:** ![ashwin2610](https://avatars.discourse-cdn.com/v4/letter/a/67e7ee/32.png) [@ashwin2610](https://discuss.elastic.co/u/ashwin2610)\
**Post date:** [March 30, 2023, 9:09am UTC](https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801/4 "2023-03-30T09:09:50Z")

</div>

On further research I was able to notice that we could configure the keystore from the GUI  
ECE-\> Deployments-\> Security-\> Elastic key Store

> **[Secure your settings | Elastic Cloud Enterprise Reference \[3.5\] | Elastic](https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configuring-keystore.html)**

![Elastic](https://us1.discourse-cdn.com/elastic/original/3X/9/a/9a8088cb27961bb1ca72d6132cc16f323861d704.png)  
here just want to check if I am providing the correct key value for the O365  
The secret I guess would be the account password

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 27, 2023, 9:10am UTC](https://discuss.elastic.co/t/trying-to-configure-the-watcher-within-the-elk/328801/5 "2023-04-27T09:10:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.