Ulimits and docker swarm

I’m facing with a general issue related setting ulimits on maybe leaking some parameter
this observation comes from: docker 20.10.13

this is my setting:

cat /etc/security/limits.conf

#*               soft    core            0
#*               hard    rss             10000
#@student        hard    nproc           20
#@faculty        soft    nproc           20
#@faculty        hard    nproc           50
#ftp             hard    nproc           0
#@student        -       maxlogins       4
#* soft memlock unlimited
#* hard memlock unlimited
#* hard rss unlimited
#* hard stack unlimited
#* soft nproc 40960
#* hard nproc 40960
#* - nofile 655360

* soft nofile 1024000
* hard nofile 1024000
* soft memlock unlimited
* hard memlock unlimited
elasticsearch   soft     nofile          65535
elasticsearch   hard     nofile          65535
elasticsearch   soft     memlock         unlimited
elasticsearch   hard     memlock         unlimited
root soft nofile 1024000
root hard nofile 1024000
root soft memlock unlimited

I have a docker swarm on 3 hosts where it was deployed 18 nodes /per host.
When I enable docker service with 18 nodes on 3 hosts I coudn’t reloging from root to other user such as elasticsearch on this host. It seems to be saturated from some reason. I need to troubleshoot if docker swarm not complicated there.

lsof | grep elasticsearch | wc -l

Do You have any idea ? what could be wrong?