We have a View. A form with two Graphs and a Time Picker. On Splunk 6.0.1. The Server has 2 CPU und 4 GB RAM
When I try to open this view the first time, the Graphs generate for a graph for all time.
After a while it show, that to many events exists. When the search is done, a change of period has no effect and other problem like freeze of browser window.
The default Time period in the XML is "Last 24 hours". For the first time this will ignored and the Time Picker shows "all Time"
I've also tried to set a viewstate for the user. After splunk restart, the Time Picker show the right default time but I runs still for all time.