Everything is powered from the UPS or some devices are straight from "wall socket"?
I remember some situations where the problem was devices using different phases and somewhere nearby someone stealing electricity
Such problem will not be discovered by any tester, 600$ or 16$.
P.S. Why Cisco->RouterOS-> switch? Who's masquerading? Who is who? Cisco is ISP and RouterOS is clients router?