I had my boss come ask what was going on with the server (never a good thing) because he was seeing several thousand replication events between his mail and a few other databases. After examining the server logs and the documents what I found was the following.
All documents were modified by the server about the same time that Chronos was running. Subsequently agents that are triggered by changed/modified documents ran and sent thousands of emails to external and internal.
Chronos started @ 04:29:29 PM
The first modified document in one database 04:29:37 PM
Chronos ended @ 04:32:41 PM
The last modified document in the same database 04:34:17 PM
Log shows no other events (besides mail routing) and domain indexer. The domain indexer is throwing off an error in the bosses mail file - “Database is currently being indexed by another process”
I searched for update or fixup in the log thinking something may have detected some corruption and fired off either task, but nothing was found.
Looking for any ideas, suggestions, etc.
Thanks!
Brent