Hi tkw03, Can you describe what you have done ? I have upgraded Demisto Add On version 3.0.2 and when I checked /opt/splunk/var/log/splunk/create_xsoar_incident_modalert.log file there is an error logs which says that  "signature="User does not have permissions" . Configuration does not have any user requirement. So what is actually this user ? I 'm also using admin account while creating searches. ... View more