When data stops flowing, the first place to look is the _internal index. Indexing pipeline issues, parsing errors, and queue warnings all show up there.
Common search patterns include checking for blocked queues, parsing errors, and license usage spikes.