Instead of removing the EventsSource: SYLINK in 14.2 version, You need to put it back and make some improvement.
With the environment of 100K machines and tons of GUPs involve, we need to see what specific GUP does client obtained its definitions? Please make this available from th logs and include report in SEPM.