# Unable to extract a saved search csv file via watcher in ES-6.6.2

**URL:** <https://discuss.elastic.co/t/unable-to-extract-a-saved-search-csv-file-via-watcher-in-es-6-6-2/173181>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [March 20, 2019, 3:21pm UTC](https://discuss.elastic.co/t/unable-to-extract-a-saved-search-csv-file-via-watcher-in-es-6-6-2/173181 "2019-03-20T15:21:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nithani25](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nithani25/32/33457_2.png) [@Nithani25](https://discuss.elastic.co/u/Nithani25)\
**Post date:** [March 20, 2019, 3:21pm UTC](https://discuss.elastic.co/t/unable-to-extract-a-saved-search-csv-file-via-watcher-in-es-6-6-2/173181/1 "2019-03-20T15:21:27Z")

</div>

Hi Team,  
I am trying to email a copy of saved search(.csv file) via watcher email action. but i am continuous failure with the url and with status code 404 & 405

Here is the copy of my watcher alert:

```
{
  "trigger": {
    "schedule": {
      "interval": "1h"
    }
  },
  "input": {
    "none": {}
  },
  "condition": {
    "always": {}
  },
  "actions": {
    "send_email": {
      "email": {
        "profile": "standard",
        "attachments": {
          "XXXXXXXX - ErrorDescription.csv": {
            "http": {
              "request": {
                "scheme": "http",
                "host": "XXXXXXXX",
                "port": 5601,
                "method": "POST",
                "url": "http://XXXXXXXX:5601/api/reporting/generate/csv?jobParams=(conflictedTypesFields:!(),fields:!(%27@timestamp%27,ErrorDescription),indexPatternId:efd72790-e713-11e8-ac3a-9b1cbcb2363e,metaFields:!(_source,_id,_type,_index,_score),searchRequest:(body:(_source:(excludes:!(),includes:!(%27@timestamp%27,ErrorDescription)),docvalue_fields:!(),query:(bool:(filter:!((match_all:())),must:!((match_phrase:(log_type.keyword:(query:abc-xyz))),(match_phrase:(abxghyjsk.keyword:(query:uiqyiuyioq))),(range:(%27@timestamp%27:(format:epoch_millis,gte:1550478369674,lte:1553066769674)))),must_not:!(),should:!())),script_fields:(),sort:!((%27@timestamp%27:(order:desc,unmapped_type:boolean))),stored_fields:!(%27@timestamp%27,ErrorDescription),version:!t),index:%27jkajkhjkhak*%27),title:%27iioiojiojskl%20-%20ErrorDescription%27,type:search)",
                "params": {},
                "headers": {},
                "auth": {
                  "basic": {
                    "username": "elastic",
                    "password": ""
                  }
                }
              },
              "content_type": "application/csv"
            }
          }
        },
        "priority": "high",
        "to": [
          "kljsakljlkja@nowere.com"
        ],
        "subject": "XXXXXXXX Saved Search"
      }
    }
  }
}
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 17, 2019, 3:21pm UTC](https://discuss.elastic.co/t/unable-to-extract-a-saved-search-csv-file-via-watcher-in-es-6-6-2/173181/2 "2019-04-17T15:21:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.