Hello,
We have an integration test which verifies expected values after deploying a new splunk instance. This test is written in python using the requests module.
We're using port forwarding to reach the deployed splunk instance, the url we're hitting is:
f"https://localhost:arbitrary_port/services/licenser/localslave?output_mode=json"
From the output we're using the following keys to get the master_uri value:
['entry'][0]['content']['master_uri']
This test often passes, but sometimes will fail because the value returned is "self".
Any idea why this would be happening?
Apparently this started happening with Splunk 8, but is not an issue with Splunk 7.3.