I use LDAP for users. I want to restrict few users temporarily during Splunk degraded mode.
May be creating local account with the name will disable their login. So I created the user using
curl -k -u server:/services/authentication/users -d name=user -d password=password -d roles=user
but now I delete that local account using this:
curl -k -u --request DELETE server:/services/authentication/users/users
The response returns all thousands of users in LDAP. How do I limit the response to just status code?
Thanks
Use the f option to specify which field(s) you want returned. See https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTREF/RESTprolog#Request_and_response_details .
Seems like f option dont work on DELETE requests.