In the answer above, can someone comment on why the scope=sub searches with basedn="dc=mydomain,dc=com" do NOT work (with the error in the original post), while the same scope=sub searches do work when the basedn includes an OU (i.e. basedn="ou=example,dc=mydomain,dc=com"). Shouldn't the fact that scope=sub allow the first search to work? Also, for note, the search does work on the older version of this app and other ldap tools... ... View more

This was from a 6.1.1 instance. According to the docs, that rest API endpoint was not added until version 6.1. ... View more

You can get the process IDs of the running splunkweb processes in your distributed environment using the following: | rest /services/server/status/resource-usage/splunk-processes | search process=splunkweb | table splunk_server pid You can adapt this to get a count and alert off that... ... View more