I did find out that the GUI and rest show different things:   REST: | rest /servicesNS/-/-/configs/conf-authorize splunk_server="local" | search title IN (role_power role_atest) | transpose Now the questions are which one is correct and why are they different? ... View more

It's a little more involved than that. The process is documented at https://docs.splunk.com/Documentation/Splunk/8.0.0/Indexer/Moveapeertoanewsite. It describes a physical move to a different location, but the concept is the same. ... View more