Fixed it for me too - odd issue. ran this search index=_internal component=AuthorizationManager and created the missing roles with no capabilites and the page loaded straight away Thanks! ... View more

Splunk v 8 has Python 3 onboard. I do not believe that there are plans to upgrade Python on the lower versions of the application. The documentation bits on Python 3 are found in : https://docs.splunk.com/Documentation/Splunk/8.0.2/Python3Migration/AboutMigration If you are already on splunk 8 and you want to restrict to Python 3 only, put the following in $SPLUNK_HOME/etc/system/local/server.conf [general] python.version = python3 And restart the Splunk system. ... View more

If that is so, it is definitely because all of the events have at least 1 value for expiration that is from today , which is what you asked for. It sounds like the data is not really how you expect it to be. ... View more