The Nexpose Splunk App uses a scripted input to collect data from your Nexpose console. This script is executed by Splunk on a cron which is configured by default to run at 4am each morning - therefore the dashboard will be empty until the cron executes at 4am (at which point data should appear).
If you want to execute the collection of data at a different time you have two options:
1) Change the cron and restart Splunk.
2) Run the script manually.
From version 2.0 of the Nexpose Splunk App, the Nexpose credentials are stored by Splunk which requires a session key (which is given to the script by Splunk when it is executed via the cron). When executing the script manually, follow the instructions on screen (note it requires access to Splunk's python modules) to obtain a session key.
Further to this, the Nexpose Splunk application uses reports from Nexpose which are only available in the enterprise version of Nexpose so if you are using the community edition the application will not be able to obtain data. If this is an issue, you can easily obtain a trial version of Nexpose enterprise.
