I have the following search:
sourcetype="renderer" earliest=-3mon latest=now rdr_time>0 | timechart span=1d count by rdr_template
everything works fine.
when i open that search in the search manager it opens correctly but within a second it gets completely messed up and results in this:
sourcetype="renderer" earliest==now rdr_time>0 | timechart span=rdr_template
(notice the '==' or the 'span=rdr_template')
after saving of course the search does not make any sense and fails.
has anybody an idea why this happens and what can be done? thx!