@alancproctor this seems to be Education related question (which specific session are you trying out?). Do reach out to Splunk Education team for further help (you should have email on Education site as per region like AMER, APAC etc). They do provide Splunk instance for training as per specific courses (is this one of those instance?). Have you tried changing the time picker to All Time and maybe index=* to see whether data got indexed to right index or not and also may be the data is older and you are trying to search for recent time like last 24 hours? Where did you get the data from? Was it as asked in course or from Splunk Docs Search Tutorial?
... View more