When the module is enabled on the agent, the endpoint will begin streaming unique process execution events. The first time that the module observes a process execution that it has not reported before, the event will be streamed. Therefore, when the Process Tracker module is first enabled, many process execution events will be for ones that are reported for the first time.
Over time, uniqueness of the process execution events will taper off. If you plan to onboard a large population of endpoints, perform the onboarding with groups of endpoints to avoid an initial burst of events being streamed. If you monitor the process when a group is enabled, this will inform you of the size of the next group to enable, according to the available capacity of your system.