Unable to extract a saved search csv file via watcher in ES-6.6.2

Elastic Stack Elasticsearch
1

Hi Team,
I am trying to email a copy of saved search(.csv file) via watcher email action. but i am continuous failure with the url and with status code 404 & 405

Here is the copy of my watcher alert:

{
  "trigger": {
    "schedule": {
      "interval": "1h"
    }
  },
  "input": {
    "none": {}
  },
  "condition": {
    "always": {}
  },
  "actions": {
    "send_email": {
      "email": {
        "profile": "standard",
        "attachments": {
          "XXXXXXXX - ErrorDescription.csv": {
            "http": {
              "request": {
                "scheme": "http",
                "host": "XXXXXXXX",
                "port": 5601,
                "method": "POST",
                "url": "http://XXXXXXXX:5601/api/reporting/generate/csv?jobParams=(conflictedTypesFields:!(),fields:!(%27@timestamp%27,ErrorDescription),indexPatternId:efd72790-e713-11e8-ac3a-9b1cbcb2363e,metaFields:!(_source,_id,_type,_index,_score),searchRequest:(body:(_source:(excludes:!(),includes:!(%27@timestamp%27,ErrorDescription)),docvalue_fields:!(),query:(bool:(filter:!((match_all:())),must:!((match_phrase:(log_type.keyword:(query:abc-xyz))),(match_phrase:(abxghyjsk.keyword:(query:uiqyiuyioq))),(range:(%27@timestamp%27:(format:epoch_millis,gte:1550478369674,lte:1553066769674)))),must_not:!(),should:!())),script_fields:(),sort:!((%27@timestamp%27:(order:desc,unmapped_type:boolean))),stored_fields:!(%27@timestamp%27,ErrorDescription),version:!t),index:%27jkajkhjkhak*%27),title:%27iioiojiojskl%20-%20ErrorDescription%27,type:search)",
                "params": {},
                "headers": {},
                "auth": {
                  "basic": {
                    "username": "elastic",
                    "password": ""
                  }
                }
              },
              "content_type": "application/csv"
            }
          }
        },
        "priority": "high",
        "to": [
          "kljsakljlkja@nowere.com"
        ],
        "subject": "XXXXXXXX Saved Search"
      }
    }
  }
}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.