Currently working on Elasticsearch 8.17.1 with Watcher + DataDog integration. While xpack.watcher.encrypt_sensitive_data=true encrypts stored watches, the initial watch definition still requires plaintext credentials. Current Limitation { "actions": { "datadog_webhook": { "webhook": { …

Watcher: Support for Keystore Variables in Watch Definitions

dakrone (Lee Hinman) October 6, 2025, 2:33pm 6

Thanks! I’ve triaged it to the appropriate team.

Topic		Replies	Views
Is it possible to use secrets from Elasticsearch keystore in ES Watcher actions? Elasticsearch elastic-stack-alerting	2	671	January 20, 2022
How to use keystore for basic auth password for the input watch Elasticsearch elastic-stack-alerting	6	1008	June 14, 2018
Setting value by reading from a file Elasticsearch elastic-stack-alerting	5	966	December 6, 2016
Encrypting Sensitive Data in Watcher - How? Elasticsearch	4	901	July 23, 2018
Enabling email notifications Elasticsearch elastic-stack-alerting	7	553	July 30, 2019