127.0.0.1 - - [28/Apr/2022:23:57:12.065 +0000] "GET /splunk-es/en-US/app/SplunkEnterpriseSecuritySuite/search?s=%2FservicesNSzzz%2Fddddddddd/../../../../../../../../../some_random_endpoint%3Ftestparam&sid=1604005781.21405&display.page.search.mode=smart&dispatch.sample_ratio=1&workload_pool=&q=%7C%20%60tstats%60%20count%20from%20datamodel%3DAuthentication.Authentication%20by%20_time%20span%3D10m%20%7C%20timechart%20minspan%3D10m%20count&earliest=-24h%40h&latest=now&display.page.search.tab=visualizations HTTP/1.1" 404 26 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" - - 0ms
127.0.0.1 - admin [28/Apr/2022:23:55:24.714 +0000] "GET /en-US/app/search/search?s=%2FservicesNSzzz%2Fddddddddd/../../../../../../../../../some_random_endpoint%3Ftestparam&sid=1604005781.21405&display.page.search.mode=smart&dispatch.sample_ratio=1&workload_pool=&q=%7C%20%60tstats%60%20count%20from%20datamodel%3DAuthentication.Authentication%20by%20_time%20span%3D10m%20%7C%20timechart%20minspan%3D10m%20count&earliest=-24h%40h&latest=now&display.page.search.tab=visualizations HTTP/1.1" 200 1918 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" - e96e7bc39673e943924dbdd1f5a4cf7b 325ms