Somerford Defence Service

Somerford Associates is an Elite Splunk partner that specialises in providing Splunk to secure Government departments. Under the new MOD Splunk Enterprise Agreement (MSEA), Somerford has been contracted to provide and manage the Splunk licence and professional services across the MOD. Somerford will act as a single point of contact for all Splunk requirements, with the aim of simplifying and maximising the MOD investment in Splunk. The enterprise agreement offers a range of new services for end-users including, on-demand and advisory services, professional services, user training, as well as discovery and technical workshops to enhance user’s skills and future use-case adoption.

Splunk Licencing

As part of the MSEA, the MOD has chosen to utilise the Splunk Infrastructure Licencing Model which measures the number of vCPU’s allocation per Splunk instance rather than the previous licensing “ingest” model which is based on data volume. All current end-users customers have been allocated with a new vCPU licence, and all future requests for additional or new allocations will need to be requested via Somerford.

Support Desk

Our Support Desk handles a large amount of calls annually and resolves over 95% in-house without needing to escalate to the vendor. Where required, we can also act as an escalation point to the vendor for any bugs found and ensure the case is resolved in a timely manner.

Health Check

As part of the condition of the deployment of the licence, Somerford will provide a Health Check to ensure that the customer instance is correctly deployed.

Professional Services

Somerford has been contracted to provide a pool of Security cleared resources including technical engineering and project managers to assist the end-users current and future plans/deployments of Splunk. As part of the MSEA, an allocation of professional services has been set aside and can be requested subject to approval.

Defence Knowledge Workshops

A learning journey of workshops to assist MOD.

Introduction to Splunk Knowledge Workshop

February 24th, 10am-1pm
March 17th, 10am-1pm
April 28th, 10am-1pm

Splunk Training Next Step: Search Expert

Advanced Searches and Dashboarding Knowledge Workshop

February 3rd, 10am-1pm
April 7th, 10am-1pm
June 2nd, 10am-1pm

Splunk Training Next Step: Knowledge Manager

Advanced Splunk Knowledge Workshop

March 8th, 10am-1pm
May 10th, 10am-1pm

Splunk Training Next Step: Search Optimisation

Discovery Workshops

Splunk 101
Introduction to Splunk Discovery Workshop

10th March | 10am-1pm

Splunk for Security: Enterprise Security Discovery Workshop

23rd March | 10am-2pm

Splunk4Rookies - Observability Discovery Workshop

9th February | 10am-1pm
New Event

Splunk SOAR (Phantom) Discovery Workshop

17th May | 10am-1pm

Advanced Splunk
Virtual Workshop

7th June | 10am-1pm
New Event

Splunk4Rookies - Observability for Higher Education

24th March | 10:30am - 12:30pm GMT
12th May | 10:30am - 12:30pm BST
New Event

Hybrid Session: Available to Attend Virtually or In-Person


The Art of the Possible with Splunk

1st April | 10am-10:45am

Zero Trust with
Okta and Splunk

21st March | 10am

Observability as Code with HashiCorp and Splunk

28th March | 10am

SecOps Webinar Series

Splunk Security Essentials

15th February | 10am
SecOps Series

Accelerate Investigation of Advanced Threats Through Automated Early Attack Detection

22nd February | 10am
SecOps Series

Splunk for Security: Risk-Based Alerting

15th March | 10am
SecOps Series

Splunk Security Cloud & Mission Control

6th April | 10am
SecOps Series

Splunk SOAR Security Orchestration & Automation

26th April | 10am
SecOps Series

Splunk for Security: Utilising Machine Learning

23rd June | 10am
SecOps Series

DevSecOps Webinar Series

Splunk Observability Suite Series:
Why (Splunk) Observability?

14th February | 10am-10:45am
DevSecOps Ser.

Splunk Observability Suite Series: How to Achieve High Level of Observability

14th March | 10am-10:45am
DevSecOps Ser.

Splunk Observability Suite Series: Splunk Observability Deep-Dive

27th April | 10am-10:45am
DevSecOps Ser.
Scroll to Top