I am using the REST interface to re authenticate the search peers on a Splunk search head.
I am sending a curl command and ask for a Json answer.
The answer is huge and not clear as the success status of the ADD or DELETE.
Should I parse it to find the : "replicationStatus":"Successful","rtsearch_enabled":true as the result status?
Look for two key words in the response (Json): Unauthorized to know if your credential passed trough and Error for other issue.
View solution in original post