Need help on finding source of "audit.log.event" events.

Hello

For a few weeks now, our MC Eventlog gets "spammed" by these events:

notice	
audit.log.event	
Auditing error (Audit messages transmission resumed.) occurred at

notice	
audit.log.event	
Auditing error (Audit messages started to drop. Reason = No buffer space available) occurred at

This "eventflood" happens several times a week and goes on for about two hours, with a total of ~2000 events during this time.

So far we've found that the process for this is "MGWD", but that's it. No further info on how to identify the source of this.

Has anyone else seen this?

Any hint would be much appreciated.