Hi,
So we have 2 instances of Splunk installed, both of which have been upgraded to 6.3 over the past month or so. Both of the setups are very different so the only similarity is the version upgrade. Since the upgrade, people (around 12+ different individuals) have to constantly state that they cannot perform searches, access apps. Whenever I view their page, the Splunk Web UI doesn't have their user ID loaded and they need to clear the cache so that Splunk properly works via Web UI. However, it isn't just one time that each individual needs to do this, it's probably 3-5 times **per day!** I have to clear my cache every few hours so that I can continue working on splunk apps. It's highly frustrating and I can't seem to find this documented anywhere as a known bug.
For an example of what it looks like, it is literally blank where the username should be:
![Splunk][1]
Also if you try to search while this happens it displays the message:
In handler 'savedsearch': Cannot get username when all users are selected.
And if you go to the launcher it looks like this:
![alt text][2]
[1]: /storage/temp/75223-splunk-picture.jpg
[2]: /storage/temp/75224-splunk-broken.jpg
↧