Tried it in 7.1.2 now which is working as well.
7.2.1 however is broken.
Update then 🙂
The only version of the 7.2.* stream of Splunk that is production-stable is the newly released v7.2.4. No previous versions of 7.2.* should be used in production due to devastating bugs like this one.