I use LDAP for users. I want to restrict few users temporarily during Splunk degraded mode.
May be creating local account with the name will disable their login. So I created the user using
curl -k -u server:/services/authentication/users -d name=user -d password=password -d roles=user
but now I delete that local account using this:
curl -k -u --request DELETE server:/services/authentication/users/users
The response returns all thousands of users in LDAP. How do I limit the response to just status code?