Somerford Defence Service

Somerford Associates is an Elite Splunk partner that specialises in providing Splunk to secure Government departments. Under the new MOD Splunk Enterprise Agreement (MSEA), Somerford has been contracted to provide and manage the Splunk licence and professional services across the MOD. Somerford will act as a single point of contact for all Splunk requirements, with the aim of simplifying and maximising the MOD investment in Splunk. The enterprise agreement offers a range of new services for end-users including, on-demand and advisory services, professional services, user training, as well as discovery and technical workshops to enhance user’s skills and future use-case adoption.

Splunk Licencing

As part of the MSEA, the MOD has chosen to utilise the Splunk Infrastructure Licencing Model which measures the number of vCPU’s allocation per Splunk instance rather than the previous licensing “ingest” model which is based on data volume. All current end-users customers have been allocated with a new vCPU licence, and all future requests for additional or new allocations will need to be requested via Somerford.

Support Desk

Our Support Desk handles a large amount of calls annually and resolves over 95% in-house without needing to escalate to the vendor. Where required, we can also act as an escalation point to the vendor for any bugs found and ensure the case is resolved in a timely manner.

Health Check

As part of the condition of the deployment of the licence, Somerford will provide a Health Check to ensure that the customer instance is correctly deployed.

Professional Services

Somerford has been contracted to provide a pool of Security cleared resources including technical engineering and project managers to assist the end-users current and future plans/deployments of Splunk. As part of the MSEA, an allocation of professional services has been set aside and can be requested subject to approval.

Defence Knowledge Workshops

A learning journey of workshops to assist MOD.

Introduction to Splunk Knowledge Workshop


Splunk Training Next Step: Search Expert

Advanced Searches and Dashboarding Knowledge Workshop

23rd November | 10am-1pm

Splunk Training Next Step: Knowledge Manager

Advanced Splunk Knowledge Workshop

19th January | 10am-1pm

Splunk Training Next Step: Search Optimisation

Discovery Workshops

Splunk4Rookies - Observability

11th November | 10:30am-12:30pm
New Event

Splunk Cloud on AWS

10th November | 10am-1pm

Splunk Enterprise Security

30th November | 10am-2pm

Splunk Phantom

25th January | 10am-2pm

Splunk IT Service Intelligence

2nd December | 10am-2pm


Splunk .conf 2021 Highlights Webinar

19th November | 10am

Splunk Observability:
Inspect and Understand your IT Stack

25th November | 10am

Splunk for Security

9th November | 11am

Getting AWS Data Into Splunk Cloud

17th November | 10am

Splunk, Okta, Netskope, HashiCorp & AWS can Manage Risk by Working Together

7th December | 10am

Splunk Integration with Netskope and Okta Webinar

10th December | 10am-11am
Scroll to Top