What do you mean by "host" cert? The cert splunk uses for internal communication? Sure. If I remember correctly, if you specify certs in global SSL settings they will be used for whatever tls-related purpose you'll need them - hec, web, splunkd - unless you overwrite the setting on a per-use basis. EDIT: Just remember that if you want to use the same cert for web server and for some connections initiated _from_ your splunk server, you need to issue a cert with both TLS Web Server and TLS Web Client usages ... View more

Hi @bill_king, This error does not mean there is a problem on this report. You get this error, because your search head compute resources (CPU core count) is not enough for running concurrent search jobs. - You can check your scheduled saved searches, alert, correlation search schedule times? Generally most of the scheduled jobs run every beginning hour. Because 5 min, 10 min, 15 min, 30 min, 60min schedules triggers at 00 minute every hour. You can try to change schedule times/periods. - It is best to use Schedule window "auto" on schedule settings.  - If you CPU usage is not high you can tweak below settings on Search Head; Server settings » Search preferences Relative concurrency limit for scheduled searches --> 75 Relative concurrency limit for summarization searches --> 100 ... View more