Watcher Enabling in ES configuration

Elastic Stack Elasticsearch
1

HI Team,
I want to configure watcher in my ES 6.4 version.

Before that i have few question and i need answer for it and really appreciate if i can able to rectify my questions.
1. I have 3 master and 3 data node,do i need to configure watcher in both the ES Config YAML file.
2. I already below setup using Xpack security setting FYI,

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: full
xpack.security.transport.ssl.key: certs/hostname.net.key.pem
xpack.security.transport.ssl.certificate: certs/hostname.net.crt.pem
xpack.security.transport.ssl.certificate_authorities: [ "certs/trust_chain.pem" ]
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.key: certs/hostname.net.key.pem
xpack.security.http.ssl.certificate: certs/hostname.net.crt.pem
xpack.security.http.ssl.certificate_authorities: [ "certs/trust_chain.pem" ]
xpack.monitoring.exporters:
id1:
type: http
host: ["https://hostname.net:9263"]
auth:
username: remote_monitor
password: changeme
ssl:
certificate_authorities: [ "certs/trust_chain.pem" ]

  1. If i'm adding Xpack watcher setting in my configuration and below setting is enough to trigger mail,

xpack.notification.email.account:
exchange_account:
profile: outlook
email_defaults:
from: elasticsearch@xxx.com
smtp:
auth: true
starttls.enable: true
host: xxx.xxx.com
port: 25
user: elastic
password: xxxxx

I need your opinion on my approach which im making correct or missing anything in config setting.

2

Hey,

I am not sure that I got from your post what the actual question is. Is it about the correctness of that configuration?

That is hard to tell, unless one sees the proper indentation (you can use markdown snippets here).

If it's something else, please do ask explicitely.

Thanks!

--Alex

3

HI @spinscale

Thanks for the reply,

1.Do i need to add the Xpack.notification.email.account in all the ES server or it enough to place it master node.
2.second point is my current configuration setup in elasticsearch.yml.
3.Third point configuration which i going to add for alert enable, is it correct or anything need to modify in it.

i want you to correct that configuration

4

yes, that needs to be configured for all nodes, as watches are executed across the cluster

5

All node mean both master and data node of es server.

6

yes, that's what I meant. When you test things with the Execute Watch API the watch will be executed on the node that receives the request.

7

@spinscale Thanks for the input.

will work around on it and reach you if required any further input on it.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.