Managing anomalous network telemetry message flows

A non-transitory storage medium to store machine-readable instructions that, when executed by a machine, cause the machine to:

• receive an indication that a first message flow of a plurality of message flows is anomalous, wherein the plurality of message flows is provided by a plurality of network devices over a network to report network telemetry metrics according to corresponding subscriptions;
• and
• responsive to receiving the indication:
• determine a first bandwidth available for anomalous message network telemetry communications in the network;
• determine a second bandwidth available for a first network device of the plurality of network devices based on the first bandwidth;
• and
• replace a first subscription associated with the first network device with a second adaptive subscription corresponding to the second bandwidth.

A computer system comprising:

• a network telemetry message rate tracking engine configured to:
• monitor a plurality of message flows sent by respective network devices of a plurality of network devices, wherein the plurality of message flows is associated with reporting a network telemetry metric to a network management system;
• and
• determine that a rate of a given message flow of the plurality of message flows is an outlier, wherein the given message flow has an associated bandwidth;
• and
• a network telemetry management engine configured to, responsive to the network telemetry message tracking rate engine determining that the rate is an outlier:
• determine an aggregate available bandwidth for message flows of the plurality of message flows, which have respective expected rates;
• and
• adjust the bandwidth associated with the given message flow based on the aggregate available bandwidth.