Works as designed 🙂 Found following paragraph in the Splunk Documentation. Searches that return too many results per series can cause JSChart to hang the browser. Splunk employs a throttling strategy that restricts the number of results returned per series to 500 by default. You can configure this value by going to JSChart.conf and changing the maxResultsCount parameter to something other than 500. I'll increase the span so that each series won't have more than 500 results per 30 days or month. I might even change the .conf to have at least 1 value per hour. ... View more