Are logs from the ssh connections created by aptible db:tunnel forwarded to any of the log drains?
Aptible doesn’t log db:tunnel in any special way so it would have to be caught by query logging. Aptible opens a connection between your local machine and the database but we do not monitor any traffic within that connection since it is all encrypted.