Watcher limitations
The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Stack
Generally available
When you refer to a file script in a watch, the watch itself is not updated if you change the script on the filesystem.
Currently, the only way to reload a file script in a watch is to delete the watch and recreate it.
When the security features are enabled, a watch stores information about what the user who stored the watch is allowed to execute at that time. This means, if those permissions change over time, the watch will still be able to execute with the permissions that existed when the watch was created.