# X-Pack 6.1.2 - Watcher Firing twice for the same event

**URL:** <https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267>\
**Category:** Elasticsearch\
**Created:** [January 19, 2018, 3:37pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267 "2018-01-19T15:37:02Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [January 19, 2018, 3:37pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/1 "2018-01-19T15:37:02Z")

</div>

Hi,

For most of our watches, watcher is firing twice for the same results since 6.1.2. Additionally, sometimes it doesn't fire all together.

No issues whatsoever on 6.1.1.

Anyone know if this is a known bug?

Thanks!  
James

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [January 19, 2018, 3:39pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/2 "2018-01-19T15:39:05Z")

</div>

Hey,

are you able to share the watcher history index for the day that this happened? If you dont want to put it anywhere public, you can also email it to me, $firstname.$lastname@elastic.co

You could either run a snapshot operation or run a scroll search to extract the data.

Thank you!

--Alex

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [January 19, 2018, 3:41pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/3 "2018-01-19T15:41:49Z")

</div>

Hey Alex,

Sure, I'll send this over by e-mail.

Thanks,  
James

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [January 19, 2018, 4:09pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/4 "2018-01-19T16:09:06Z")

</div>

@spinscale - do you have a gpg you could send me?

Thanks!  
James

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [January 19, 2018, 4:16pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/5 "2018-01-19T16:16:30Z")

</div>

[https://pgp.surfnet.nl/pks/lookup?op=get&search=0x04A62E53B7C5A052](https://pgp.surfnet.nl/pks/lookup?op=get&search=0x04A62E53B7C5A052)

keyid B7C5A052

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [January 19, 2018, 4:28pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/6 "2018-01-19T16:28:06Z")

</div>

Sent!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 16, 2018, 4:28pm UTC](https://discuss.elastic.co/t/x-pack-6-1-2-watcher-firing-twice-for-the-same-event/116267/7 "2018-02-16T16:28:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.