Chris, as an update on EM portal, I found that the Notifications issue we had the last week it was caused because the script logic searches for (tickets, Goals, Expenses and Posts) based in the emrecordstatus.recordmodificationdate:
HitTracker alltickets = mediaArchive.query("projectgoal").after("emrecordstatus.recordmodificationdate", since).sort("projectstatus").sort("creationdateDown").search();
getUpdatedRows(collectionsupdated, alltickets, "tickets");
I think we did this to try to avoid to maintain another Date field that tracks the modificatios on the Object?, but this turned into a problem since, some how the records got updated, ( I ran a curl-query on one of the tickets modified and confirmed emrecordstatus updated at that time Monday 4am our time) still not sure who is modifying this tables, content seems not modified, a restore or any elastic internal process can modify this?