Just an update, we were able to open a case for it and below were the given steps for a workaround: Please follow the workaround steps to fix the issue. A. on every affected SH edit Go to the next path /opt/splunk/share/splunk/search_mrsparkle/exposed/build/pages/enterprise/ Look the file: authorization_roles.js B. Then find the following information. this.indexListSearchJob.getResults().subscribe((results) C. Add the following between the parentheses. { count: 1000 } so that it looks like this: this.indexListSearchJob.getResults({ count: 1000 }).subscribe((results) D. Save file and hit the _bump endpoint: https://<yourSplunk>/en-US/_bump on this point will depend if you are using secure UI add the s and if not you can log into like this http://<yourSplunk>/en-US/_bump However, I couldn’t find the string stated in bullet point B [this.indexListSearchJob.getResults().subscribe((results)] but I did find a similar string which says “this.indexListSearchJob.getResults().subscribe(function(results)” and that’s where I applied the workaround. Also, I tried opening the file with a text editor and saving it leading to a bunch of invalid characters to show up. I instead used the sed command to replace the text. Hope this helps! ... View more