Looks like it might be a Visualization limitation for Pie Chart If the table generated by the search contains additional columns, those extra columns have no meaning in the terms of the pie chart and are ignored. ... View more

Default behaviour of navigation xml doesn't support target field. There are workaround by making changes to application.js file for your app. See below post for more details. http://answers.splunk.com/answers/11654/appbar-links-open-in-new-window ... View more

I believe sql server was piping unicode characters over to Splunk which may have broken down after Python tried to print those characters via stdout. The following strips down to ascii characters: out = "".join(i for i in row.responseFromSQL if ord(i)<128) After this change, I've been unable to recreate the problem. Users can now navigate the search app. On a side note, getUserInfo is still being called roughly 10 times each second after an Admin brings up the roles page. I consider that a bug as I'm sure my DBA will not be thrilled. ... View more

Indeed, limiting to explicit indexes increases performance. Thanks alacercogitatus ... View more

Tks.. its help me to ... View more