It is not cloud, but Enterprise on-prem.  Interestingly, I was able to run the same searches on the CLI using a max event return of 50k and got results back no problem.  Wondering why the GUI would autocancel if the CLI can get the dispatch results no problem. ... View more

Autocancel is set to 0 already.  I've been down that path.  The search ends in a couple of seconds.  Any hints on any resource limits or splunk limits that might be able to be tweaked?  I'm headed down that path since I've been looking into this for over a week with no progress. ... View more

I'm having the same problem, not making any headway.  Have you checked your search.log in the inspector window?  Mine is showing a collector failure to write (before it calls the CANCEL), but can't figure out why.  Looking at the $SPLUNKHOME/var/log/*.log may be helpful.  I can see some errors there, but none have really led me to the answer.  It's almost like it is hitting a search limit and stopping. ... View more