Seems like a Splunk bug with SSO when the dashboard has panels configured for auto-refresh.
Just clear your browser cached cookies and all Splunk tabs will stop auto-refreshing
... View more
You could use curl to access the universal forwarder REST API and query the config like this:
curl -k -u admin:YourUFPassword https://YourUFIP:YourUFMGMTPort/servicesNS/nobody/search/configs/conf-outputs/
... View more