Fleet server, connection limits and duplicate agents


We recently enrolled about 300 fleet clients to our On-Prem ECE cluster, enrollment seems to be working fine but duplicates( marked as offline) are spawning en mass. Data are being ingested from machines with double entries and i can unenroll the duplicates based on time last seen. But why is this happening?

In addition to that, about half of the clients are "offline" at any given time with the following error code in the logs

[elastic_agent][error] Could not communicate with fleet-server Checking API will retry, error: status code: 429, fleet-server returned an error: MaxLimit, message: exceeded the max limit

I have followed the settings guide for the fleet server integration policy and adjusted it to accomodate 5000 client, with no change.


  num_counters: 10000    

  max_cost: 10485760     


   policy_throttle: 100ms


     interval: 10ms      

     burst: 2500          

     max: 2601           


     interval: 10ms      

     burst: 2500          

     max: 5000            


     interval: 8ms       

     burst: 2500          

     max: 5000            


     interval: 40ms      

     burst: 250           

     max: 500             


  gc_percent: 20

Any ideas?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.