@@ -252,17 +252,14 @@ messages can contain basic HTML tags. You can control which groups of tags are
252
252
allowed by <<email-html-sanitization, Configuring HTML Sanitization Options>>.
253
253
254
254
You configure the accounts {watcher} can use to send email in the
255
- `xpack.notification.email` namespace in `elasticsearch.yml`.
255
+ `xpack.notification.email` namespace in `elasticsearch.yml`.
256
+ The password for the specified SMTP user is stored securely in the
257
+ <<secure-settings, {es} keystore>>.
256
258
257
259
If your email account is configured to require two step verification, you need
258
260
to generate and use a unique App Password to send email from {watcher}.
259
261
Authentication will fail if you use your primary password.
260
262
261
- IMPORTANT: Currently, neither Watcher nor Shield provide a mechanism to encrypt
262
- settings in `elasticsearch.yml`. Because the email account credentials appear
263
- in plain text, you should limit access to `elasticsearch.yml` to the user that
264
- you use to run Elasticsearch.
265
-
266
263
[[email-profile]]
267
264
{watcher} provides three email profiles that control how MIME messages are
268
265
structured: `standard` (default), `gmail`, and `outlook`. These profiles
@@ -314,7 +311,7 @@ xpack.notification.email.account:
314
311
user: <username>
315
312
--------------------------------------------------
316
313
317
- In order to store the account SMTP password, use the keystore command
314
+ To store the account SMTP password, use the keystore command
318
315
(see {ref}/secure-settings.html[secure settings])
319
316
320
317
[source,yaml]
@@ -352,7 +349,7 @@ xpack.notification.email.account:
352
349
user: <email.address>
353
350
--------------------------------------------------
354
351
355
- In order to store the account SMTP password, use the keystore command
352
+ To store the account SMTP password, use the keystore command
356
353
(see {ref}/secure-settings.html[secure settings])
357
354
358
355
[source,yaml]
@@ -389,7 +386,7 @@ xpack.notification.email.account:
389
386
--------------------------------------------------
390
387
<1> `smtp.host` varies depending on the region
391
388
392
- In order to store the account SMTP password, use the keystore command
389
+ To store the account SMTP password, use the keystore command
393
390
(see {ref}/secure-settings.html[secure settings])
394
391
395
392
[source,yaml]
@@ -432,7 +429,7 @@ xpack.notification.email.account:
432
429
it is a good idea to check with your system administrator if you receive
433
430
authentication-related failures.
434
431
435
- In order to store the account SMTP password, use the keystore command
432
+ To store the account SMTP password, use the keystore command
436
433
(see {ref}/secure-settings.html[secure settings])
437
434
438
435
[source,yaml]
0 commit comments