# Watcher email alert fails intermittently

**URL:** <https://discuss.elastic.co/t/watcher-email-alert-fails-intermittently/234994>\
**Category:** Elasticsearch\
**Created:** [May 29, 2020, 10:46pm UTC](https://discuss.elastic.co/t/watcher-email-alert-fails-intermittently/234994 "2020-05-29T22:46:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cglencr](https://avatars.discourse-cdn.com/v4/letter/c/db5fbb/32.png) [@cglencr](https://discuss.elastic.co/u/cglencr)\
**Post date:** [May 29, 2020, 10:46pm UTC](https://discuss.elastic.co/t/watcher-email-alert-fails-intermittently/234994/1 "2020-05-29T22:46:47Z")

</div>

I am using ES 7.4 and have created a Watcher with an email alert. It is scheduled to go off once a day.

Some days it works. Others it fails. And this is with no changes to ES or environment.

When I go to research why and perform Simulate on the Watcher execute will fail but force\_execute will succeed. How is this possible?

Here is the error message:

```
"actions": [
  {
    "id": "send_email",
    "type": "email",
    "status": "failure",
    "error": {
      "root_cause": [
        {
          "type": "messaging_exception",
          "reason": "failed to send email with subject [Watcher Notification: SFTR Batch Job Status - Daily] via account [exchange_account]"
        }
      ],
      "type": "messaging_exception",
      "reason": "failed to send email with subject [Watcher Notification: SFTR Batch Job Status - Daily] via account [exchange_account]",
      "caused_by": {
        "type": "s_m_t_p_send_failed_exception",
        "reason": "530 5.7.1 Client was not authenticated\n"
      }
    }
  }
]

```

},

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 26, 2020, 10:46pm UTC](https://discuss.elastic.co/t/watcher-email-alert-fails-intermittently/234994/2 "2020-06-26T22:46:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.