# Too Many Transforms Automatically Recreated

**URL:** <https://discuss.elastic.co/t/too-many-transforms-automatically-recreated/372899>\
**Category:** Elasticsearch\
**Created:** [January 7, 2025, 4:58pm UTC](https://discuss.elastic.co/t/too-many-transforms-automatically-recreated/372899 "2025-01-07T16:58:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Behnam.R](https://avatars.discourse-cdn.com/v4/letter/b/48db29/32.png) [@Behnam.R](https://discuss.elastic.co/u/Behnam.R)\
**Post date:** [January 7, 2025, 4:58pm UTC](https://discuss.elastic.co/t/too-many-transforms-automatically-recreated/372899/1 "2025-01-07T16:58:07Z")

</div>

Elasticsearch cluster (version 8.17.0) I see numerous transforms are being created automatically. Even when I delete these transforms, they are recreated immediately.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/0/804f7f17ddb79d023e793efd2739ff50d8cc0a2d.png)

The transforms follow a naming pattern like:

- `entities-v1-latest-builtin_containers_from_ecs_data`
- `entities-v1-latest-builtin_kubernetes_cluster_ecs`
- `entities-v1-latest-builtin_hosts_from_ecs_data`

All of them are in continuous mode and are managed.

I suspect these transforms might be related to **Entity Analytics** , but I am unsure.

- These transforms are part of which built-in features?
- Is there a way to disable or prevent their recreation?

thanks

---

<div class="post-metadata">

**Author:** ![bpearson](https://avatars.discourse-cdn.com/v4/letter/b/b5a626/32.png) [@bpearson](https://discuss.elastic.co/u/bpearson)\
**Post date:** [July 1, 2025, 8:03pm UTC](https://discuss.elastic.co/t/too-many-transforms-automatically-recreated/372899/2 "2025-07-01T20:03:39Z")

</div>

I've been trying to pare down my cloud cluster and have been messing around with these transforms quite a bit. I think because the feature is in beta it is not very well documented. These transforms are created when you enable the [Elastic Entity Model](https://www.elastic.co/docs/reference/observability/elastic-entity-model). I would like more documentation on what each one does, because I certainly want to use the framework but probably don't need everything that's going on with these.  
For example, most of the kubernetes transforms seem to be using metrics-kubernetes\* or metrics-_otel_ as their source index. We don't have any kubernetes clusters and will have no data in these indices, but if I turn it off it breaks the inventory screen and it simply asks to be enabled again. These transforms should be documented and potentially give the option to turn on/off specific resources.