Internet2

close
Use Internet2 SiteID

Already have an Internet2 SiteID?
Sign in here.

Internet2 SiteID

Your organization not listed? Create a local account to use Internet2 services.

Create SiteID

Splunk

overview
Service Type:
Security & Identity
Phase:
General Availability
Eligible Subscribers:
Internet2 Member or Other R&E Participant
Sponsors:
Baylor University, California Polytechnic State University - San Luis Obispo, Indiana University, University of Illinois - Urbana-Champaign, University of Washington
Email:
netplus@internet2.edu
Contact:
Nick Lewis

NET+ Splunk Offering

Internet2 member and non-member schools can buy on-premise Splunk Enterprise software via Carahsoft at a discounted basis. Refer to the fees section with Carahsoft for details. Member institutions can also benefit from further reduced pricing should they increase their Splunk usage through the Splunk program.

Plus, Internet2 Members using Splunk can access free training classes. Details coming soon.

Additional information including pricing from Carahsoft on the Splunk program can be found at:

http://www.carahsoft.com/buy/education-contracts/internet2-net-splunk

About Splunk

Splunk Inc. is the market-leading platform that powers Operational Intelligence. We pioneer innovative, disruptive solutions that make machine data accessible, usable and valuable to everyone.

Machine-generated data is one of the fastest growing and complex areas of big data. It's also one of the most valuable, containing a definitive record of all user transactions, customer behavior, machine behavior, security threats, fraudulent activity and more. Splunk turns machine data into valuable insights. It's what we call Operational Intelligence.

Machine data provides an untapped opportunity for institutions of higher education. Campus networks, infrastructure, applications, servers, learning management systems and end-user devices generate huge volumes of data that—when leveraged—can provide unparalleled insight into problems, usage patterns and trends across an entire campus IT infrastructure.

About Carahsoft

Carahsoft has built our reputation as a customer-centric organization dedicated to serving the needs of our technology manufacturers, education, government end users, and reseller ecosystem.

We have a proven history of helping education and government agencies find the best possible technology solution at the best possible value. Each customer works directly with a dedicated account representative to determine a solution tailored specifically to meet his or her needs. We combine our extensive knowledge of the technologies we provide, with a thorough understanding of the government procurement process, to analyze needs, provide configuration support, simplify the ordering process, and offer special government pricing.

Higher education institutions use Splunk to:

  • Identify problems
  • Detect security risks and network abuse

  • Improve student and faculty experience across all systems used

  • Manage and monitor machine data from multiple sources

  • Collect and audit data to meet regulatory requirements

 

features

Get more value from your data.

Splunk Enterprise collects data from any source, including logs, clickstreams, sensors, stream network traffic, web servers, custom applications, hypervisors, containers, social media and cloud services. It then enables you to search, monitor and analyze that data to discover powerful insights across multiple use cases like security, IT operations, application delivery, industrial data and IoT, giving you valuable intelligence across your entire organization.

Collect and Index Data

Index data regardless of format or location. Because the structure and schema are applied only at search time you can analyze the data without limitation.

Search and Investigate

Search data using the powerful and intuitive Splunk Search Processing Language (SPL TM). Splunk automatically normalizes your varying data formats and provides 140+ commands so you can perform statistical searches, calculate metrics and even look for specific conditions within a rolling time window. Zoom in and out on timelines to automatically reveal trends, spikes and patterns and click to drill down into search results.

Correlate and Analyze

Splunk makes it easy to find relations between events and activities. Correlated based on time, location, or custom search results. Use the Transaction command to identify related events as a transaction or session and investigate failed transactions. Let the Event Pattern Detection command automatically find common or rare patterns in your big data. Enable users to discover and share additional insights with the point-and-click ease of the unique Pivot interface.

Visualize and Report

Visualize trends and characteristics in custom dashboards and reports suited to any business, operational or security need. Analyze further with chart overlay and pan and zoom controls. Predictive visualizations let you forecast highs and lows, plan system resources and anticipate workloads. You can also personalize dashboards and reports for anyone, share them as PDFs, or embed them into other applications.

Monitor and Alert

Turn searches into real-time alerts and automatically trigger notifications via email or RSS; then execute remedial conditions and other complex criteria. Gain additional information at the time of the alert to assist with faster root cause analysis and problem resolution.

Apps and Premium Solutions

Extend the power of Splunk Enterprise. Apps deliver a targeted user experience for typical use cases and data sources. Splunk Premium Solutions combine real-time analytics and rich features to manage your security posture, IT operations and more. (splunkbase.splunk.com)

 

fees

The price of the Splunk offering is based upon the amount of data indexed PER DAY; there are no charges for number of users, number of CPUs/cores/nodes, data sources or data types, number of searches or volume of data searched. And there is no charge for the total amount of data you store in your Splunk instance. Once you have licensed your Splunk offering, you can have as many people as you want use the software and create as many searches, alerts, correlations, reports, dashboards and automated remedial actions as you need, at no additional cost. 

As part of the updated Splunk program, Splunk premium apps Enterprise Security and IT Service Intelligence are included in the program at a discount. 

To receive this pricing, schools must contact Carahsoft for pricing. Pricing information can be found after registering on the Carahsoft website at:

http://www.carahsoft.com/buy/education-contracts/internet2-net-splunk#authorized-resellers

You can also contact the Carahsoft Splunk team at:

Telephone: 703.230.7431 or 888.66.CARAH


Email: splunkinternet2@carahsoft.com


Carahsoft also managed the resellers available in the program that will be able to help your campus work through your Splunk needs. The resellers in the program are:

BAI, CDW-G, cStor, ePlus, GTS Technology Solutions, NuHarbor Security, Presidio, RFD, SHI, Spico

To help universities with predicting demand for data indexing needs, onboarding licenses for evaluating the Splunk offering are available. Please see the FAQ or email splunkinternet2@carahsoft.com if you have additional questions on pricing.

Support

Universities that purchase the Splunk offering at the 50GB tier will be allowed three named support contacts. Those who purchase the Splunk offering at the 100GB tier or higher will be allowed five named contacts.

License Management

Even in the best run environments, there may be unanticipated spikes in the daily data volume. Users of the Splunk offering can currently exceed the daily indexing amount specified in their license up to 5 times within a rolling 30-day window. While users will receive a warning each time, the data will continued to be indexed and all functionality will remain. If the user exceeds the daily licensing limit more than 5 times within that rolling window, then all data continues to be collected and indexed but the user must contact Carahsoft/reseller for additional license capacity in order to access Splunk's search capability and other features.

faq

Have a question about the Internet2 NET+ Splunk offering that wasn't answered through our menu options? Take a few moments to browse through our frequently asked questions. Click Show all to view all the answers at once. Feel free to email us if you have a question that's not answered here.

Internet2 NET+ Splunk - General

Who is Splunk?

Splunk shipped its first software in 2006 with the goal of making machine data accessible, usable and valuable to everyone. Machine data is one of the fastest growing and most pervasive segments of "big data"-generated by websites, applications, servers, networks, mobile devices and all the sensors and RFID assets that produce data every second of every day. By monitoring and analyzing digital footprints - everything from clickstreams to network activity to learning management systems transactions - Splunk can help universities turn machine data into strategic insights for the institution. Headquartered in San Francisco with offices worldwide, Splunk is a publicly traded company.

Who is Carahsoft?

Carahsoft has built our reputation as a customer-centric organization dedicated to serving the needs of our technology manufacturers, education, government end users, and reseller ecosystem. We have a proven history of helping education and government agencies find the best possible technology solution at the best possible value. Each customer works directly with a dedicated account representative to determine a solution tailored specifically to meet his or her needs. We combine our extensive knowledge of the technologies we provide, with a thorough understanding of the government procurement process, to analyze needs, provide configuration support, simplify the ordering process, and offer special government pricing.

Why is Carahsoft involved?

As Splunk has grown, they have engaged with Carahsoft for all of their public-sector business and required the Splunk program to match their other public-sector business. This will also address the request by campuses to have RFP responses.

Who are the resellers in the program?

BAI, CDW-G, cStor, ePlus, GTS Technology Solutions, NuHarbor Security, Presidio, RFD, SHI, Spico

What is the NET+ Splunk offering?

The Splunk offering provides Internet2 member schools with the opportunity to buy on-premise Splunk Enterprise software on a discounted, 3-year term basis. Splunk software licenses are based on total daily volume of data indexed, freeing your institution from worrying about counting seats or FTEs or report usage to determine the appropriate tier to purchase. The offering will have tiers at the 50GB, 100GB, 200GB, 500GB, and 1000GB levels; the price per gb of Splunk goes down dramatically as more volume is purchased, so building campus-wide use cases and buy-in can drive dramatic savings for universities. If your campus has software needs outside of these tiers, then please contact splunkinternet2@carahsoft.com for additional pricing information.

What about Splunk Cloud?

Splunk Cloud was specifically excluded from the updated agreement as it is significantly different Terms of Service (ToS) than the on-prem software. We are engaging with the Splunk service advisory board on potentially adding it to the program.

What is the relationship between Splunk and Internet2? Internet2 and Carahsoft?

Internet2 has signed a business agreement with Splunk that provides a unique offering specific to the higher education community. Internet2 has signed a business agreement with Carahsoft for support of the program.

If I already have an existing Splunk perpetual license over 20GB, can I switch this license to an annual subscription license with Internet2?

Internet2 licenses are stackable, so if your university needs additional capacity, you can buy a new license to add to your daily indexing needs. Buying a license through the NET+ Splunk offering, however, will not change or impact existing Splunk licenses that you have already purchased.

The Splunk offering gives me a way to buy Core Splunk and Enterprise Security and IT Service Intelligence Apps; can I purchase Splunk classes, professional services, or applications like PCI Compliance, etc through this offering?

Core Splunk can serve as the foundation for gaining operational intelligence for machine data across your enterprise. Training and professional services are not included in the Splunk offering because each university’s needs are unique. Nearly all Splunk applications at http://apps.splunk.com/ can be downloaded and extended for free; the Splunk applications for PCI Compliance and Splunk for VMware are commercially developed and supported so that you can focus your energies on other tasks if need be.

Eligibility and Enrollment

Do I have to be a direct Internet2 member to get the Net+ Splunk offering?

No. Your institution has to be a not-for-profit university located in the United States in order to qualify for the Splunk offering. Direct Internet2 members get an additional discount, but membership in Internet2 is not required.

When will the Splunk offering be available to higher education members?

Splunk offering is available now! Six universities participated in an initial service validation and 5 universities participated in the program update that allowed us to identify potential issues before the general offering was initiated. The service validations schools were North Dakota State University; Indiana University; California Polytechnic State University-San Luis Obispo; Baylor University, University of Washington and the University of Illinois at Urbana-Champaign. The universities involved in the program update were Baylor University, California Institute of Technology, Indiana University, University of Nebraska Lincoln, and University of Washington.

How does my institution sign up for the offering?

Visit "How To Participate" for the information on how to sign-up.

Can a portion of my institution sign up (for example, a business school, medical school, or even a single department)?

Yes! Under the updated Splunk program, a campus still needs to sign the Splunk Software License Agreement with Splunk institution-wide, but individual schools or departments can buy their own capacity.

Cost and Terms

For questions regarding cost, upgrade, terms of agreement, and billing, please see our FEES tab.

What needs to be signed?

Your campus will need to sign the Splunk Software License Agreement (SLA) direct with Splunk to match how they do this for their other customers.

A Reseller Service Order which handles the financial terms (price, length of term, etc). This is very similar to the previous order form and includes the campus giving Internet2 the right to list the campus as part of the program. This agreement will now be executed with Carahsoft or the approved reseller of your choice.

What needs to be signed if I have an active Splunk agreement from before 2018 and I want to upgrade or expand?

For existing campuses that want to add additional capacity under their existing Splunk agreement, your campus will need to assign the license agreement from your Internet2 agreement to Splunk. This will be signed working with Internet2 and Splunk.

How do I get an upgrade or expansion if I have an active Splunk agreement from before 2018?

To add additional capacity under their existing Splunk agreement, your campus will need to assign the license agreement from their Internet2 agreement to Splunk. Carahsoft/reseller will work with you to process the upgrade or expansion.

Who do I contact if I need a RFP?

One of the benefits of the updated program is that Carhsoft or a reseller in the program can respond to a RFP. Please contact them to initiate a RFP response.

You can contact the Carahsoft Splunk team at:

Telephone: 703.230.7431 or 888.66.CARAH Email: splunkinternet2@carahsoft.com

There are 11 resellers as part of the program. Please contact Carahsoft if you do not already have a contact at the chosen reseller.

What free online learning does Splunk offer?

For 2018, Splunk is going to continue to provide free training to the community this year. Splunk is making Splunk Fundamentals 1 free to all Internet2 member faculty, staff, and students. Splunk Fundamentals 1 is of significant value in that there is a free certification that can be taken afterwards to become a Splunk Certified User. Below are links to all free training materials.

Free Training Materials

participate

Ready to subscribe and get all the great features of the Internet2 Splunk offering for your organization? You'll need to get some information together, as outlined below.

Determine your eligibility

Not-for-profit institutions of higher education headquartered in the United States are eligible to sign up for the Splunk offering. Internet2 members receive special pricing, but membership in Internet2 is not required.

You'll need to indicate whether you're an Internet2 member when engaging with Carahsoft/reseller.

For more information on becoming an Internet2 member, see "Internet2 Membership."

Determine your pricing tier

The price of the Splunk service is based on the total amount of data your institution would like to index per day; five tiers are offered.
You'll need to communicate the tier when engaging with Carahsoft/reseller.  See the FEES tab to learn more about your pricing options.

Are any special considerations required?

Does your institution require special considerations due to state law or regulation? Are there any mandated limitations? You'll need to indicate this when you engage with Carahsoft/reseller.

Contact Carahsoft or reseller in the program to initiate this process

You can contact the Carahsoft Splunk team at:

Telephone: 703.230.7431 or 888.66.CARAH
Email:splunkinternet2@carahsoft.com

Resellers in the program:

There are 11 resellers as part of the program. Please contact Carahsoft if you do not already have a contact at the chosen reseller:

BAI, Bridge Data Solutions, CDW-G, Cover4Solutions, cStor, NuHarbor Security, Peak Resources, Inc., Presidio, RFD, SHI, SLAIT Consulting