Edit: This is basically the feature request: #221172 (comment)

Kibana version:

9.0.1

Elasticsearch version:
9.0.1

Server OS version:
Latest version of ECK

Describe the bug:
I have a policy that has an Inactive agent unenrollment timeout set to 47336040 (which is 1,5 years). I would expect that all machines havent connected after 1,5 years are unenrolled and no longer within the overview. However, I see machines in the policy that have connect 2 years ago.

Note: we have both an Inactivity timeout (47336040) and a Inactive agent unenrollment timeout (47336040) set for this policy.

Steps to reproduce:

1. set an unenrollment timeout
2. wait for the unenrollment timeout to expire
3. nothing happens

Expected behavior:
Machines are unenrolled after the timeout has expired.

Screenshots (if relevant):

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context:

@nchaulet already looked into this a bit.