# Endpoint 7.13 migration to 7.13.1 Lesson learned with Fleet “On-Prim” -Bad

**URL:** <https://discuss.elastic.co/t/endpoint-7-13-migration-to-7-13-1-lesson-learned-with-fleet-on-prim-bad/275343>\
**Category:** Elastic Security\
**Tags:** fleet\
**Created:** [June 8, 2021, 7:31pm UTC](https://discuss.elastic.co/t/endpoint-7-13-migration-to-7-13-1-lesson-learned-with-fleet-on-prim-bad/275343 "2021-06-08T19:31:55Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![ferullo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ferullo/32/74240_2.png) [@ferullo](https://discuss.elastic.co/u/ferullo)\
**Post date:** [June 11, 2021, 3:58pm UTC](https://discuss.elastic.co/t/endpoint-7-13-migration-to-7-13-1-lesson-learned-with-fleet-on-prim-bad/275343/7 "2021-06-11T15:58:09Z")

</div>

> [@PublicName](#):
>
> Nope I do mean as the user. It's not all the time I'll PM you a screen shot on the next one I see. Due to usernames it won't be public. It's one that makes you scratch your head. It's interesting to note that at you will end up with 2 instances of Endpoint running. This does not end well for obvious reasons.

Thanks, I await the PM. `elastic-agent.exe` may occasionally launch an instance of `elastic-endpoint.exe` to do some internal bookkeeping. Perhaps that's what you're seeing. If you could make sure to include PID, PPID, and command line as well as the user in the screenshot, and make sure all `elastic-agent.exe` and `elastic-endpoint.exe` are visible that would be great. I understand if there are bits you want to black out in the screenshot.

> [@PublicName](#):
>
> 7.13.1 on the same file server you will see memory usage consume the entire amount that it can get it's hands up. No policy changes nothing. No other installs have changed. This looks like it's related to what 7.13 was doing so instead of filling the entire drive with the STATE log's it's keeping them in memory.

Which executable are you referring to here? `elastic-endpoint.exe` or `filebeat.exe`? Am I right to presume you're referring to the same memory use/CPU use concern you described in this other post ([Endpoint 7.12.x migration to 7.13 Lesson learned with Fleet "On-Prim"](https://discuss.elastic.co/t/endpoint-7-12-x-migration-to-7-13-lesson-learned-with-fleet-on-prim/274244))?

---

_[View the full topic](https://discuss.elastic.co/t/endpoint-7-13-migration-to-7-13-1-lesson-learned-with-fleet-on-prim-bad/275343)._