Splunk

Frequently Asked Questions


Have a question about the Internet2 NET+ Splunk offering that wasn’t answered through our menu options? Take a few moments to browse through our frequently asked questions. Feel free to email us if you have a question that’s not answered here.

Internet2 NET+ Splunk General Questions

Who is Splunk?

Splunk shipped its first software in 2006 with the goal of making machine data accessible, usable and valuable to everyone. Machine data is one of the fastest growing and most pervasive segments of “big data”-generated by websites, applications, servers, networks, mobile devices and all the sensors and RFID assets that produce data every second of every day. By monitoring and analyzing digital footprints – everything from clickstreams to network activity to learning management systems transactions – Splunk can help universities turn machine data into strategic insights for the institution. Headquartered in San Francisco with offices worldwide, Splunk is a publicly traded company.

Who is Carahsoft?

Carahsoft has built our reputation as a customer-centric organization dedicated to serving the needs of our technology manufacturers, education, government end users, and reseller ecosystem. We have a proven history of helping education and government agencies find the best possible technology solution at the best possible value. Each customer works directly with a dedicated account representative to determine a solution tailored specifically to meet his or her needs. We combine our extensive knowledge of the technologies we provide, with a thorough understanding of the government procurement process, to analyze needs, provide configuration support, simplify the ordering process, and offer special government pricing.

Why is Carahsoft involved?

As Splunk has grown, they have engaged with Carahsoft for all of their public-sector business and required the Splunk program to match their other public-sector business. This will also address the request by campuses to have RFP responses.

Who are the resellers in the program?

BAI, cStor, ePlus, GTS Technology Solutions, LCN, NuHarbor Security, Presidio, RFD, SHI, Spico.

What is the NET+ Splunk offering?

The Splunk offering provides Internet2 member schools with the opportunity to buy on-premise Splunk Enterprise software on a discounted, 3-year term basis. Splunk software licenses are based on total daily volume of data indexed, freeing your institution from worrying about counting seats or FTEs or report usage to determine the appropriate tier to purchase. The offering will have tiers at the 50GB, 100GB, 200GB, 500GB, and 1000GB levels; the price per gb of Splunk goes down dramatically as more volume is purchased, so building campus-wide use cases and buy-in can drive dramatic savings for universities. If your campus has software needs outside of these tiers, then please contact splunkinternet2@carahsoft.com for additional pricing information.

What about Splunk Cloud?

Splunk Cloud was specifically excluded from the updated agreement as it is significantly different Terms of Service (ToS) than the on-prem software. We are engaging with the Splunk service advisory board on potentially adding it to the program.

What is the relationship between Splunk and Internet2? Internet2 and Carahsoft?

Internet2 has signed a business agreement with Splunk that provides a unique offering specific to the higher education community. Internet2 has signed a business agreement with Carahsoft for support of the program.

If I already have an existing Splunk perpetual license over 20GB, can I switch this license to an annual subscription license with Internet2?

Internet2 licenses are stackable, so if your university needs additional capacity, you can buy a new license to add to your daily indexing needs. Buying a license through the NET+ Splunk offering, however, will not change or impact existing Splunk licenses that you have already purchased.

The Splunk offering gives me a way to buy Core Splunk and Enterprise Security and IT Service Intelligence Apps; can I purchase Splunk classes, professional services, or applications like PCI Compliance, etc through this offering?

Core Splunk can serve as the foundation for gaining operational intelligence for machine data across your enterprise. Training and professional services are not included in the Splunk offering because each university’s needs are unique. Nearly all Splunk applications can be downloaded and extended for free; the Splunk applications for PCI Compliance and Splunk for VMware are commercially developed and supported so that you can focus your energies on other tasks if need be.

Eligibility and Enrollment

Do I have to be a direct Internet2 member to get the Net+ Splunk offering?

No. Your institution has to be a not-for-profit university located in the United States in order to qualify for the Splunk offering. Direct Internet2 members get an additional discount, but membership in Internet2 is not required.

When will the Splunk offering be available to higher education members?

Splunk offering is available now! Six universities participated in an initial service validation and 5 universities participated in the program update that allowed us to identify potential issues before the general offering was initiated. The service validations schools were North Dakota State University; Indiana University; California Polytechnic State University-San Luis Obispo; Baylor University, University of Washington and the University of Illinois at Urbana-Champaign. The universities involved in the program update were Baylor University, California Institute of Technology, Indiana University, University of Nebraska Lincoln, and University of Washington.

How does my institution sign up for the offering?

Visit the Engage section for the information on how to sign-up.

Can a portion of my institution sign up (for example, a business school, medical school, or even a single department)?

Yes! Under the updated Splunk program, a campus still needs to sign the Splunk Software License Agreement with Splunk institution-wide, but individual schools or departments can buy their own capacity.

Cost and Terms

For questions regarding cost, upgrade, terms of agreement, and billing, please see our Sign Up tab.

What needs to be signed?

Your campus will need to sign the Splunk Software License Agreement (SLA) direct with Splunk to match how they do this for their other customers.A Reseller Service Order which handles the financial terms (price, length of term, etc). This is very similar to the previous order form and includes the campus giving Internet2 the right to list the campus as part of the program. This agreement will now be executed with Carahsoft or the approved reseller of your choice.

What needs to be signed if I have an active Splunk agreement from before 2018 and I want to upgrade or expand?

For existing campuses that want to add additional capacity under their existing Splunk agreement, your campus will need to assign the license agreement from your Internet2 agreement to Splunk. This will be signed working with Internet2 and Splunk.

How do I get an upgrade or expansion if I have an active Splunk agreement from before 2018?

To add additional capacity under their existing Splunk agreement, your campus will need to assign the license agreement from their Internet2 agreement to Splunk. Carahsoft/reseller will work with you to process the upgrade or expansion.

Who do I contact if I need a RFP?

One of the benefits of the updated program is that Carhsoft or a reseller in the program can respond to a RFP. Please contact them to initiate a RFP response. You can contact the Carahsoft Splunk team at:
Telephone: 703.921.4186 or 888.66.CARAH Email: splunkinternet2@carahsoft.com
There are 11 resellers as part of the program. Please contact Carahsoft if you do not already have a contact at the chosen reseller.