Splunk enterprise security user acceptance test, test use cases

[kiranhar]

We deploying Splunk enterprise security ( SIEM) solution) and it is in the final implementation stage. does anyone have user acceptance test use cases to check the implementation whether done as per the best practices and required correlation are configured and they are working?

So I wanted to check including system, performance, implementation, use cases, correlations, alerts, search engine and other if anything important to test and confirm that the vendor has successfully implemented the Splunk.

Please help.

[mdessus_splunk]

Many ways to anwser:

• Do manual test on specific use case
• Use intrusive testing tools
• Ask a pen testing company to do a intrusive test against your IT