The initial calibration period was too short, meaning Spotlight did not calibrate an accurate picture of "normal" database activity. Instead, it calibrated a relatively quiet period of database activity and subsequently any activity above this would cause alarms.