# Updated via Autotest Editor - 2026-05-25T17:39:33.898Z
# Source of truth: this YAML file

id: core-interoperability-check-siem
project: pbx
module: core
group: core-interoperability
title: Verify SIEM integration is configured and forwarding security events
description: Verify SIEM integration is configured and forwarding security events
priority: Medium
tags: []
references: []
dependencies:
  - label: Admin Portal
    value: https://pbx.local:4443 (configure via $BASE_URL)
  - label: Repository URL
    value: ${BASE_URL}/downloads or $REPO_URL
  - label: Protocol
    value: HTTPS (admin portal) + optional SSH/CLI
  - label: External Systems
    value: SIEM server (Splunk, ELK, QRadar) and/or ADDM/ADDM collector
  - label: Credentials
    value: Admin user with sufficient privileges (portal + SSH where needed)
  - label: Test Data
    value: Clean test tenant or lab PBX instance (recommended isolated environment)
preconditions: []
postconditions: []
steps:
  - action: Open admin portal or repository URL in browser context
    expected: ''
    automatable: true
  - action: Execute the main verification or configuration action described in the test
    expected: ''
    automatable: true
  - action: Capture evidence (screenshot, log, API response)
    expected: ''
    automatable: true
  - action: Assert expected outcome
    expected: ''
    automatable: true
automation_status: automated
file: tests/core/interoperability.spec.ts
custom_fields:
  original_action: check
  original_automatable:
    - Full end-to-end execution via Playwright against the admin portal UI
    - Navigation, form interaction, and assertions are scriptable
  original_notYet: []
  original_dependencies:
    - label: Admin Portal
      value: https://pbx.local:4443 (configure via $BASE_URL)
    - label: Repository URL
      value: ${BASE_URL}/downloads or $REPO_URL
    - label: Protocol
      value: HTTPS (admin portal) + optional SSH/CLI
    - label: External Systems
      value: SIEM server (Splunk, ELK, QRadar) and/or ADDM/ADDM collector
    - label: Credentials
      value: Admin user with sufficient privileges (portal + SSH where needed)
    - label: Test Data
      value: Clean test tenant or lab PBX instance (recommended isolated environment)