Hi @elasticforme,
This older thread does share some examples, but the main thing is that you can track the source of requests using the X-Opaque-Id HTTP header if you pass the information to Elasticsearch. That can then be accessed via things like the slow logs.
Hope that helps.