Based on that, it doesn't appear that you have any devices sending data to LEM. If there's nothing sending, then we can't show you any search results and there's nothing to fire rules off.
Have you deployed any agents or configured any devices to send syslog to the LEM yet?