how do I make splunk es to check my uploaded logs

[testttt]

I have installed splunk es app and uploaded botsv1.stream_http.json (https://github.com/splunk/attack_data)

but incident_review and ess_security_posture is not hitting any event

how do I make splunk es to check my uploaded logs and generate a list of alerts like below. Please note that I am not checking the logs forwarded by agent, but the log files uploaded on the browser side

thank you

[kiran_panchavat]

@testttt There are no notable events that you can produce because you have uploaded sample events to Splunk. Could you please create an instance, send the logs to Splunk, and attempt to produce the notable events? such as unsuccessful login attempts and bruteforce attacks.

[testttt]

I created a dvwa application and used SplunkUniversalForwarder to forward the log to port 9997, containing events such as sql injection and brute force cracking,

but incident_review and ess_security_posture is not hitting any event