# How to completely disable Xpack? **URL:** \ **Category:** Logstash\ **Created:** [March 30, 2020, 9:44pm UTC](https://discuss.elastic.co/t/how-to-completely-disable-xpack/225755 "2020-03-30T21:44:53Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Alexander\_Popov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexander_popov/32/7154_2.png) [@Alexander\_Popov](https://discuss.elastic.co/u/Alexander_Popov)\ **Post date:** [March 30, 2020, 9:44pm UTC](https://discuss.elastic.co/t/how-to-completely-disable-xpack/225755/1 "2020-03-30T21:44:53Z")
I have elasticsearch 7.4 running on AWS Elastic Search with Open Distro user management with curl and basic auth - I can successful call elasticsearch root: ```auto { "name": "0ea36812a52dca373179a5cbe60cfa8d", "cluster_name": "152596411899:logs", "cluster_uuid": "ZH1QOe2TQ1Si9Jdfy62I4Q", "version": { "number": "7.4.2", "build_flavor": "oss", "build_type": "tar", "build_hash": "unknown", "build_date": "2020-02-06T10:08:47.217314Z", "build_snapshot": false, "lucene_version": "8.2.0", "minimum_wire_compatibility_version": "6.8.0", "minimum_index_compatibility_version": "6.0.0-beta1" }, "tagline": "You Know, for Search"} ``` Im trying to setup logstash: `elasticsearch { hosts => "https://search-logs-xxxxxxxxxxxxxxxx.eu-west-1.es.amazonaws.com:443" user => "logstash" password => "xxxxxxxxxxxx" ssl => true ssl_certificate_verification => false }` also in logstash.yml i have: `xpack.monitoring.enabled: false` but on start i have an error: ` [2020-03-30T21:07:43,935][ERROR][logstash.outputs.elasticsearch][main] Failed to install template. {:message=>"Got response code '401' contacting Elasticsearch at URL '[https://search-logs-XXXXXXXXXXXXX.eu-west-1.es.amazonaws.com:443/_xpack](https://search-logs-XXXXXXXXXXXXX.eu-west-1.es.amazonaws.com/_xpack)'", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError", :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http_client/manticore_adapter.rb:80:in`perform\_request'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:332:in `perform_request_to_url'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:319:in `block in perform\_request'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:414:in `with_connection'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:318:in `perform\_request'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:326:in `block in Pool'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:162:in `get'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/http\_client.rb:378:in `get_xpack_info'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/ilm.rb:57:in `ilm\_ready?'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/ilm.rb:28:in `ilm_in_use?'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/template_manager.rb:14:in `install\_template'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/common.rb:197:in `install_template'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.3.1-java/lib/logstash/outputs/elasticsearch/common.rb:53:in `block in setup\_after\_successful\_connection'"]}` i cant call /\_xpack even with curL: "Message": "Your request: '/\_xpack' is not allowed." what im doing wrong? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 30, 2020, 9:58pm UTC](https://discuss.elastic.co/t/how-to-completely-disable-xpack/225755/2 "2020-03-30T21:58:32Z")
I think you need to use [https://github.com/awslabs/logstash-output-amazon\_es](https://github.com/awslabs/logstash-output-amazon_es)? ---
**Author:** ![Alexander\_Popov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexander_popov/32/7154_2.png) [@Alexander\_Popov](https://discuss.elastic.co/u/Alexander_Popov)\ **Post date:** [March 30, 2020, 10:46pm UTC](https://discuss.elastic.co/t/how-to-completely-disable-xpack/225755/3 "2020-03-30T22:46:40Z")
It have one issue therefore [https://github.com/awslabs/logstash-output-amazon\_es/issues/154](https://github.com/awslabs/logstash-output-amazon_es/issues/154) Why classic elasticsearch plugin cant work? ---
**Author:** ![Alexander\_Popov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexander_popov/32/7154_2.png) [@Alexander\_Popov](https://discuss.elastic.co/u/Alexander_Popov)\ **Post date:** [March 30, 2020, 11:47pm UTC](https://discuss.elastic.co/t/how-to-completely-disable-xpack/225755/4 "2020-03-30T23:47:19Z")
fixed by set `ilm_enabled => false` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 27, 2020, 11:47pm UTC](https://discuss.elastic.co/t/how-to-completely-disable-xpack/225755/5 "2020-04-27T23:47:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.