Need a Splunk transition plan from one team to another.

Just pass admin password from one team to another? Should not take less than a minute if they know eachothers email

To add just a bit to gheist's comment documentation on the current environment.  Things like:

What type of and how many Splunk servers you have (search head, indexers, syslog forwarders).
Do you have more than one Splunk environment.
What type of daily/weekly/monthly/yearly maintenance functions
What automated reports do you have.
Do you have Splunk doing alerting and if so on what.
How security is setup
Current license limit


You may want to have one of the new team members shadow one of the current members for a couple hours a day for a couple days a week.

I am assuming that there is some arrangement where the new team will be able to contact the old team if needed.