As part of the MOD Splunk Enterprise Agreement (MSEA), the MOD has chosen to utilise the Splunk Infrastructure Licencing Model which measures the number of vCPU’s allocation per Splunk instance rather than the previous licensing “ingest” model which is based on data volume. All current end-users customers have been allocated with a new vCPU licence, and all future requests for additional or new allocations will need to be requested via Somerford.