Hi
if you do not want to mask your production data to be used for the test, you could connect your test server as a Search Head of your indexers and use the production data for your tests (I am an auditor and shudder all by myself thinking of my suggestion!).
Otherwise you could perform a search on your index taking all the data of the period you are interested in and export them as a row data in a text file that you can then import on your test server (maybe masking them); in this way however you have license consumption.
The ideal of security would be to perform the extraction-level masking!
Ciao.
Giuseppe
