In v28.0 GA we have added some code to log queries that cause spikes like this (provided the spike last for a few seconds atleast). But on the version this cluster is on, this is not available so there is nothing in the logs.