Sold by: Keos
Keos' Splunk Data Ingestion service is a comprehensive, expert-led engagement that adds new data sources to your existing Splunk environment. Keos' certified Splunk SMEs onboard syslog, HEC, custom, and REST data streams — with full CIM compliance — enabling your team to immediately search and analyze new data in a structured 140-hour engagement.
Overview
Architecture and Planning: Keos consultants review your networking and server infrastructure, assess resource utilization, and establish a detailed plan for new data ingestion. Syslog and HEC Onboarding: Up to five syslog and two HEC data streams are established, with props and transforms created and CIM compliance verified for each stream. Custom Data Source Onboarding: Up to two custom data streams are established, with props and transforms created and CIM compliance verified. REST Data Source Onboarding: Technical add-ons are installed and up to eight REST data streams are established, with all streams validated for CIM compliance. Validation and Documentation: The completed ingestion is validated, with end-of-engagement documentation and weekly status reports delivered throughout.
Highlights
- Syslog, HEC, custom, and REST data sources onboarded — up to 17 new data streams in a single engagement
- All data streams made CIM-compliant, enabling immediate use within Splunk security and operational apps
- Delivered by Splunk-certified SMEs in a structured 140-hour engagement
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Support
Vendor support
Software associated with this service
Ongoing Managed Detection and Response services via a full-time 24x7 security operations center
By BlueVoyant
Ongoing Managed Detection and Response delivered via a full-time 24x7 security operations center
MDR provides comprehensive security coverage, but many businesses require additional cloud-native incident response, deep digital forensics, or legal testimony support that falls outside the scope and capabilities of MDR. BlueVoyant offers our DFIR for MDR for Splunk.
By pCloudHosting LLC
This product has charges associated with it for maintenance, support, deployment, and infrastructure services provided by PCloudHosting. Splunk is offered as a preconfigured and managed deployment on Ubuntu 24.04 for log analysis, monitoring, and operational intelligence.