# \_xpack appending to elasticsearch URI

**URL:** <https://discuss.elastic.co/t/xpack-appending-to-elasticsearch-uri/218167>\
**Category:** Logstash\
**Created:** [February 6, 2020, 12:06pm UTC](https://discuss.elastic.co/t/xpack-appending-to-elasticsearch-uri/218167 "2020-02-06T12:06:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gyana\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gyana_nayak/32/56498_2.png) [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\
**Post date:** [February 6, 2020, 12:06pm UTC](https://discuss.elastic.co/t/xpack-appending-to-elasticsearch-uri/218167/1 "2020-02-06T12:06:23Z")

</div>

Hi All ,  
Keep on getting below error while connecting to elasticsearch

```
2020-02-06T17:12:19,846][INFO][logstash.outputs.elasticsearch][main] Using default mapping template

[2020-02-06T17:12:20,150][ERROR][logstash.outputs.elasticsearch][main] Failed to install template. {:message=>"Got response code '401' contacting Elasticsearch at URL 'https://search-z2-dev-elasticsearch-1-timer54qzb7fbe2kxivrrtuwj.us-east-2.es.amazonaws.com:443/_xpack'", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError", :backtrace=>["/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/manticore_adapter.rb:80:in `perform_request'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:291:in `perform_request_to_url'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:278:in `block in perform_request'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:373:in `with_connection'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:277:in `perform_request'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:285:in `block in Pool'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:162:in `get'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:378:in `get_xpack_info'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/ilm.rb:57:in `ilm_ready?'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/ilm.rb:28:in `ilm_in_use?'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/template_manager.rb:14:in `install_template'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/common.rb:130:in `install_template'", "/Users/znrind-a0053/elasticsearch/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/common.rb:51:in `block in setup_after_successful_connection'"]}

warning: thread "Ruby-0-Thread-5: :1" terminated with exception (report_on_exception is true):

LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError: Got response code '401' contacting Elasticsearch at URL 'https://search-z2-dev-elasticsearch-1-timer54qzb7fbe2kxivrrtuwj.us-east-2.es.amazonaws.com:443/_xpack'

```

below is my logstash output

```
output{
      elasticsearch {
          hosts => "search-z2-dev-elasticsearch-1-timer54qzb7fbe2kxivrrtuwj.us-east-2.es.amazonaws.com:443"
          ssl => true
      }
      stdout{codec => rubydebug}
  }

```

Don't understand why \_xpack appending to URL.

Below URL is working without \_xpack extension  
[https://search-z2-dev-elasticsearch-1-timer54qzb7fbe2kxivrrtuwj.us-east-2.es.amazonaws.com:443/\_xpack](https://search-z2-dev-elasticsearch-1-timer54qzb7fbe2kxivrrtuwj.us-east-2.es.amazonaws.com:443/_xpack)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 5, 2020, 12:06pm UTC](https://discuss.elastic.co/t/xpack-appending-to-elasticsearch-uri/218167/2 "2020-03-05T12:06:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.