Commands
Ingest & ILM
Manage ingest pipelines and Index Lifecycle Management policies with the independent, unofficial open-source ES CLI.
Ingest pipelines
es ingest list -o json
es ingest get normalize-events -o json
es ingest create normalize-events -f pipeline.json --if-not-exists
es ingest simulate normalize-events -f documents.json -o json
es ingest delete normalize-events --confirm --if-existsPipeline definitions and simulation documents can also come from stdin with
-f -.
Index Lifecycle Management
es ilm list -o json
es ilm get logs-policy -o json
es ilm create logs-policy -f policy.yaml --if-not-exists
es ilm explain logs-2026.07 -o json
es ilm delete logs-policy --confirm --if-exists--read-only blocks pipeline and policy create/delete commands. Reads,
pipeline simulation, and es ilm explain remain available.