The current status of the root cron spam is pretty good, with very few email left, but sometimes either because something breaks or because of a Puppet change, we might get a spike of them in a short amount of period.
Given the silent nature of this cron spam, it might got unnoticed for some time.
The goal of this task is to find a way to make sure that eventual increase of cron spam doesn't get unnoticed.
One option could be to have a non-paging Icinga alarm on the count of those emails that can trigger if the count in the last hour, 24 hour goes over some threshold.