Rebooting should have killed the mail queue.
In nDepth, can you do a search for "InternalRuleFired.ExtraneousEmail = *email*"? That should show you everything that fired that triggered an e-mail. Now, click on one of the events in the nDepth results and pick the "Explore --> Event" option.
You'll get a timeline like this:
That let's you see the event(s) that triggered the rule that sent the e-mail. Have you resolved whatever changed that spammed e-mail or modified the rule if this is the new norm?
Only speculation that I may have changed an OR with an AND in the rule. Now we're not getting email alerts. I'm getting LEM reports and the test email works, but the rules are not generating emails. Hunting down the issue on Exchange then going through the LEM again.
Check the time on the LEM appliance. Is it more than a few minutes off?
It is about 8 minutes. Not sure how to update the time on the appliance. I don't see any obvious options in any of the menu options; appliance, ndepth, manager, service or upgrade.
Digging into it menu by menu.
Updated the NTP server IP and it ran an NTP update command. Time is exact now. Will watch alerts.
That fixed it.