I see the following messages:
XX.XX.XXX.XXX - admin [22/Mar/2018:16:33:00.689 +0000] "GET /en-US/splunkd/__raw/servicesNS/admin/splunk_app_db_connect/db_connect/dbxproxy/taskserver HTTP/1.1" 503 328 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.106 Safari/537.36" - 314fda32a42d136382f09e44848a7a25 193ms
host = ip-XX-X-XX-XXX source = /opt/splunk/var/log/splunk/splunkd_ui_access.log sourcetype = splunkd_ui_access
XX.XX.XXX.XXX - admin [22/Mar/2018:16:30:56.571 +0000] "GET /en-US/app/splunk_app_db_connect/data_lab HTTP/1.1" 200 1832 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.106 Safari/537.36" - 314fda32a42d136382f09e44848a7a25 112ms
host = ip-XX-X-XX-XXX source = /opt/splunk/var/log/splunk/splunkd_ui_access.log sourcetype = splunkd_ui_access
... View more