@StephenD1  Straight forward answer is no. Splunk does not support multiple targetUri entries or multiple [target-broker] stanzas for failover or load balancing. The forwarder will only connect to one deployment server URI, and if that route fails, it won’t automatically try a backup. #https://help.splunk.com/en/data-management/splunk-enterprise-admin-manual/9.1/configuration-file-reference/9.1.0-configuration-file-reference/deploymentclient.conf I recommend, A simpler, well-monitored DS with good backup and version control is often more effective than trying to engineer failover. Regards, Prewin If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks! ... View more

@LogUx  Yeah, Splunk doesn’t support exporting Trellis view as a PDF. But you can try using a third-party Splunk app as an alternative. Dashboard PDF Exporter #https://splunkbase.splunk.com/app/6495 Regards, Prewin If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks! ... View more

@madcowchow  Splunk 10.0.0 introduced several changes, managing apps (which requires authentication/authorization capabilities) now requires an active license that includes this feature. If you want to use these features in Splunk 10, you’ll need to either buy or upgrade your license, or you can ask for a dev license. Regards, Prewin If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks! ... View more

@akai  Instead of cloning, try role inheritance, ess_user permissions may not be sufficient for Mission Control. Also make sure relevant mc_* capabilities are available for the new role. Refer below, for creating role in Mission Control. #https://help.splunk.com/en/splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/manage-splunk-mission-control/manage-roles-and-capabilities-for-splunk-mission-control-users Note: There might be some delay before your changes reflect in Mission Control. Regards, Prewin If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks! ... View more

@OGS  Yes. When sslAltNameToCheck fails but sslCommonNameToCheck succeeds, Splunk falls back to CN validation and allows the connection. Best is to use DNS names in your SAN and match them with sslAltNameToCheck Regards, Prewin If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks! ... View more