I have a lot of different alerts on our splunk. after every upgrade or change on splunk we just want to check if our alerts work well or not.
how can we ensure the quality of the alerts? how can we report if our alerts work properly as planed?
You will need to inject data into Splunk that will trigger your alerts. The data should also make it clear it is for test purposes so as to avoid causing alarm.