# Wachter enabled on master

**URL:** https://discuss.elastic.co/t/wachter-enabled-on-master/152532
**Category:** Elasticsearch
**Tags:** elastic-stack-alerting
**Created:** [October 15, 2018, 4:13pm UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532 "2018-10-15T16:13:51Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)
#### Post date: [October 15, 2018, 4:13pm UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/1 "2018-10-15T16:13:51Z")

</div>

Hi All,

In my (licensed) production cluster I have

`xpack.watcher.enabled: true`

And on my masters I want to disable that. If I set it to false and restart the masters I cannot delete or edit the watchers any more.

Do I need to restart all my ES nodes?

My setup is:  
ES 6.2.4,  
3 master  
4 coordinators  
10 ssd data nodes.

Thanks,  
Paul.

---

<div class="post-metadata">

### Author: ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [October 16, 2018, 6:58am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/2 "2018-10-16T06:58:52Z")

</div>

watches will never execute on master nodes, if you have dedicated data nodes. The executions happens where the `.watches` shards are. Thus there is no need to change this configuration across your cluster. In more recent versions we also reduce the threadpool to a single thread to not waste resources when watches will not be executed on that node (like master and coordinating-only nodes).

Maybe you can share more of the reasoning or what you are trying to achieve, as I am still missing those bits.

Thanks!

---

<div class="post-metadata">

### Author: ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)
#### Post date: [October 16, 2018, 7:17am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/3 "2018-10-16T07:17:17Z")

</div>

Hi Alexander,

Thanks for the clarification, it is strange while there are no .watches indices on the master node I am unable to do anything with with the watchers in kibana or on the cli (ie: edit, delete).

What I am trying to achieve is quite simple actually, disable (explicitly) xpack.watcher.enabled thus set to false and still be able to edit or delete my watches from kibana so I am unclear what you are missing.

I have currently set the xpack.watcher.enabled to false on the master nodes and I am doing a rolling restart of the cluster to see if that helps..

---

<div class="post-metadata">

### Author: ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [October 16, 2018, 7:37am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/4 "2018-10-16T07:37:43Z")

</div>

sorry I was not clear with my question. My question is **why** do you want to disable that setting, as leaving it enabled does not have any impact on your nodes - with the very notable exception that everything keeps working as expected. You can just leave it as is without having to fear any additional load on your master (with the exception when you use the execute watch API against a master node for example).

I recommend to leave this setting the same on all nodes.

---

<div class="post-metadata">

### Author: ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)
#### Post date: [October 16, 2018, 7:46am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/5 "2018-10-16T07:46:14Z")

</div>

Ah ok... that clear it up 🙂 The reason what that I have sometimes a timeout on one of my watches and other are execute twice for some reason. I have a support ticket for this and it was suggested to stop and start the watcher. This worked for some time but I am facing the same problems again. So that lead me to believe that maybe the master nodes where trying to execute the watch and failed on system resources all tough I could not find any evidence for it.

Again, thanks for the information, I will re-enable the setting.

---

<div class="post-metadata">

### Author: ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [October 16, 2018, 7:59am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/6 "2018-10-16T07:59:18Z")

</div>

Oh, now we are talking 🙂

I'd highly encourage you to upgrade to 6.4.1. Since 6.2.4 this includes two fixes, that could cause duplicate watch execution or no execution at all. Stopping/starting basically resets the current state, but it could go out of sync again.

The PRs for those fixes are

- [https://github.com/elastic/elasticsearch/pull/30613](https://github.com/elastic/elasticsearch/pull/30613)
- [https://github.com/elastic/elasticsearch/pull/33167](https://github.com/elastic/elasticsearch/pull/33167)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 13, 2018, 7:59am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532/7 "2018-11-13T07:59:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
