Skip to content
fernet.consultores

Splunk Cloud

Splunk Cloud Implementation.

End-to-end deployment of Splunk Cloud Platform, with configuration documented and versioned.

The problem we solve.

Subscribing to Splunk Cloud is quick; getting it ready for day-to-day use is not. Indexes, forwarders, apps, roles, sources and first searches all have to fit together, and every decision made badly at the start carries on for years.

What’s included.

  • Initial setup of the environment and its access
  • Forwarder deployment and connection of the first sources
  • Installation and configuration of apps and add-ons
  • First searches, alerts and dashboards
  • Handover and training for the team who will operate it

How we work.

Five phases, always in the same order. Select each one to see what happens in it. In full projects they map onto the stages of our method.

We review your platform, your data sources, your searches and your licence consumption to know where you stand.

We design the solution on Splunk Cloud Platform: indexes, retention, ingest paths, apps and access controls.

We configure the environment, deploy forwarders, install apps and add-ons and connect the first sources.

We confirm with real data that every source arrives complete and that the first searches and alerts return what is expected.

We measure usage, performance and cost after go-live and adjust what isn't adding value.

Technical capabilities.

  • Splunk Cloud Platform
  • Admin Config Service
  • Universal and Heavy Forwarder
  • Deployment Server
  • Splunkbase and AppInspect
  • SAML and corporate authentication

Use cases.

New platform

Start out with Splunk Cloud on a solid foundation.

Replacing a legacy tool

Replace a SIEM or a legacy log manager.

New scope

Extend Splunk Cloud to another area of the organisation.

Benefits for your organisation.

  • Platform operational from day one
  • Reproducible, versioned configuration
  • Team trained to operate it
  • Less rework in the following months

Deliverables.

  • Configured environment
  • Initial sources onboarded
  • Operations documentation
  • Handover sessions

Frequently asked questions.

What do we need to have ready before starting?

The Splunk Cloud subscription, a point of contact in your team, and access to whoever administers the network and the source systems.

Can you work if our network has no internet egress?

Yes. We design the data path out through intermediate forwarders, proxies or load balancers that your team can approve.

What happens to the configuration once you finish?

It stays in your repository and documented, so your team can maintain it.

Shall we talk about Implementation?

Tell us about your situation. If this service is not what you need, we will tell you; if it is, we will propose a concrete first step.

Request this service