# Thousands of filebeat ingest pipelines / cleanup
**URL:** https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421
**Category:** Elasticsearch
**Created:** [August 28, 2025, 12:21pm UTC](https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421 "2025-08-28T12:21:14Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@idl0r](https://discuss.elastic.co/u/idl0r)
#### Post date: [August 28, 2025, 12:21pm UTC](https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421/1 "2025-08-28T12:21:14Z")
Hey,
I’m not very familiar yet with ELK/SIEM and I‘m also not sure about the proper category here.
So we have like thousands of filebeat ingest pipelines. I assume they’re auto created during updates. Is it safe to delete old or even all ones and let it recreate needed ones? Is there something to clean those up, any hints or tips?
---
### Author:  [@idl0r](https://discuss.elastic.co/u/idl0r)
#### Post date: [August 29, 2025, 6:20am UTC](https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421/2 "2025-08-29T06:20:02Z")
Or would that usually be done by the ILM? Because those policies doesn’t seem to work. They’re all stuck in the rollover / hot phase for years already and I don’t see what’s blocking / happening there 😕
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [August 29, 2025, 12:52pm UTC](https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421/3 "2025-08-29T12:52:44Z")
> [@idl0r](#):
>
> So we have like thousands of filebeat ingest pipelines. I assume they’re auto created during updates.
Those ingest pipelines are created when you run the filebeat setup with their modules enabled, at some point in time this was done your system.
---
### Author:  [@idl0r](https://discuss.elastic.co/u/idl0r)
#### Post date: [August 29, 2025, 1:12pm UTC](https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421/4 "2025-08-29T13:12:16Z")
Is it safe to just delete anything that seems old? Is it possible to automatically clean those, like the ILM does or something more elegant?
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [August 29, 2025, 1:38pm UTC](https://discuss.elastic.co/t/thousands-of-filebeat-ingest-pipelines-cleanup/381421/5 "2025-08-29T13:38:52Z")
> [@idl0r](#):
>
> Is it safe to just delete anything that seems old?
If you are not using any of those modules with Filebeat you can remove them.
> [@idl0r](#):
>
> Is it possible to automatically clean those, like the ILM does or something more elegant?
No, those ingest pipelines are normally only installed when required, if the user does not need them anymore, it is up to them to remove.