There was a .conf presentation about troubleshooting queues. The section called "How to Find Problematic Queues" might help you figure out the issue.
To remember how the queues and pipelines are ordered, and what each one does, I refer to this excellent Splunk Community post. My favorite part is that it tells me which configuration file setting controls each part of the pipeline.
