Currently working on Elasticsearch 8.17.1 with Watcher + DataDog integration. While xpack.watcher.encrypt_sensitive_data=true encrypts stored watches, the initial watch definition still requires plaintext credentials. Current Limitation { "actions": { "datadog_webhook": { "webhook": { …

Watcher: Support for Keystore Variables in Watch Definitions

dakrone (Lee Hinman) October 3, 2025, 5:51pm 4

I believe you are correct that you cannot view these values from the Keystore in the Watcher UI today.

Topic		Replies	Views
Is it possible to use secrets from Elasticsearch keystore in ES Watcher actions? Elasticsearch elastic-stack-alerting	2	671	January 20, 2022
How to use keystore for basic auth password for the input watch Elasticsearch elastic-stack-alerting	6	1008	June 14, 2018
Setting value by reading from a file Elasticsearch elastic-stack-alerting	5	966	December 6, 2016
Encrypting Sensitive Data in Watcher - How? Elasticsearch	4	901	July 23, 2018
Enabling email notifications Elasticsearch elastic-stack-alerting	7	554	July 30, 2019