It could be that the timestamps are being interpreted incorrectly and that the time window you have set for your timeline doesn't match the range of time that Splunk thinks the events happened at. Try setting your timeline to be 'All time' and see if some data shows up. Alternately, try using Splunk 4.3, which has a nice preview workflow for seeing how Splunk will interpret your data before you add it.
