Remote Client access log for a bucket

I am trying to find where in the logs I can see the access to a bucket; moreover, if the connection from a particular client was using ssl. What log shows client connections ( and details like ip address and protocol) ?

There are some features for this in 4.0 EE with the auditing built in, but traditionally this is not logged like it would be with a web server since the rate of request/response is so high.

In the case of Couchbase all SSL (technically, TLS) connections are on separate ports, so you can validate through OS tools like netstat and enforce through fire-walling off the non-SSL ports.