I have a single user that is being affected by a strange issue where they are able to search, however the event table returns no content:
If this user submits a search the URL appears to be malformed:
While if I issue the same search my URL:
The users GET requests appear to be recalling an extensive field list even when a single index is searched:
index=web | fields index
I've confirmed the issue with the user in different browsers, as well as that the user has correct permissions.