Looking at my system and notice the messages dropped and message queue graphs showing a spike. In the upper right hand corner I see a reference to “reclog”. I am wondering what that is a reference to?
I think “reclog” refers to the ExtraHop Explore Appliance, so dropped messages there would mean that your EDA tried and failed to send records to the EXA. It might help to verify connectivity between the appliances, check the status of the explore cluster to ensure it looks happy and healthy, and reach out to ExtraHop Support (firstname.lastname@example.org) if you need further assistance.