but you suspect there are nodes that stop reporting events when they hit their max, where the trigger/observation is the warning about exceeding 1k (max)