Hi afiore,
curtisi provided some information in this thread that may be helpful: Agent Cache Size
I'm not aware of any specific internal events to capture the scenario mentioned in point #2, but I would certainly recommend keeping an eye on Internal Alert/Error/Exception/Warning if/when this happens again. If it happens again I would also recommend raising a technical support ticket & they could capture & analyse manager/agent debug logs which may provide some clues also.