Services
Splunk services
You already pay for Splunk. We make sure it is deployed correctly, receiving the right data, and showing people what they need. Fixed-price projects when the scope is clear. Engineers by the hour when it is not, or when you need extra capacity.
When this is the right fit
- Splunk is installed but half the data sources are not onboarded.
- An upgrade or a Splunk Cloud migration is overdue and has no owner.
- Dashboards were built by someone who has since left.
- License usage is unclear and the renewal is approaching.
- You need a Splunk engineer on your team for a defined number of hours, rather than a full project engagement.
- You are a prime contractor or a state vendor with a Splunk labor category to fill.
What we do
| Service | What you get |
|---|---|
| Deployment and architecture | Sized, documented installation on premises or in Splunk Cloud |
| Upgrades and migrations | Version upgrades and on-premises to Splunk Cloud migrations with rollback plans |
| Data onboarding and normalization | Sources ingested, parsed, and CIM-compliant, with documentation |
| Dashboards, alerts, and reports | Built around the questions your team asks |
| Health check and license optimization | Fixed-scope review with a written findings and remediation report |
Engineers by the hour
For teams that need a Splunk engineer rather than a project proposal. You purchase hours, and we provide the engineer, the timesheets, and the reporting.
- A named engineer who stays on your work for the duration. You approve any substitution.
- An hourly rate and a not-to-exceed ceiling in writing before the first hour is billed.
- A weekly timesheet with a one-paragraph summary: what was done, what is next, hours remaining against the ceiling.
- Work is remote by default, with on-site time in Northern Virginia, DC, and Maryland by arrangement.
Typical uses: covering for a Splunk admin who left, until the replacement is hired; additional capacity for a migration or a data-onboarding effort; standing hours for a security or operations team that needs Splunk expertise a few days a month; a labor category on a prime contractor’s or state agency’s time-and-materials order.
Ongoing coverage. If you need Splunk monitored on an ongoing basis rather than for a project, we scope that as a standing engagement.
Engagement models
- Time and materials. Engineers by the hour, day, or week, with a rate and a ceiling in writing.
- Fixed-price project. Defined deliverables, defined price. Deployment, migration, onboarding, dashboards, health check.
Who does the work
A lead Splunk engineer you will have met before the first hour is billed. Qualifications relevant to the work are set out in the proposal.
Tell us what is not working.
Write to us. The person who would lead the work replies within one business day, by email, and we will not send a proposal unless you ask for one.