Did you work out what was going on here? I'm trying to shoot API commands (as the user with the macro defined) and it's acting like it doesn't exist at all:
Error in 'SearchParser': Missing a search command before '|'. Error at position '36' of search query 'search index=extended | | fields user '.
The space between the pipes should have the macro in it.
EDIT: Gah, nevermind, I wasn't escaping the backticks from the macro properly.
... View more