Hello Brent,
may you post your config in order to get better help ?
It looks like that one physical inteface has some troubles, can you make an extended ping using the external ip addresses.
However, it also can be that from the point of view of hub routers one path is always preferred whatever you do at the spoke.
You should post show about topology on the hubs for internal LAN on the spoke.
What protocol is used in the DMVPN clouds ?
The usage of VRF can be required or not depending on your scenario.
Hope to help
Giuseppe