My guess is you have a FIle Infector. I would attach an OTL log so Essex can see whayt’s alerting and bringing your mail server(s) offline. 50,000 alerts is a lot of alerts. And is definitely not normal.