University Case Study

How a top University used Splunk to help proactively prevent and predict attacks across all aspects of their security and IT operations

Splunk’s anomaly detection system helps the university monitor an enormous volume of data by using AI to automatically spot potential threats that a manual process would miss and alert staff to the risk.

Splunk helps the university to balance this open access with cyber defences that would protect the university’s reputation, research income and day-to-day operations, while giving students and staff the digital tools they want to learn and teach.

Splunk’s ability to ingest, correlate, index, search and visualise data at scale gives the university the ability to look at things in a different way and respond quickly.

Customer Profile

This particular university is a research-intensive Russell Group institution with around 22,000 students and 4,500 staff. The university’s annual income is around £415.5M, of which £76.1M is derived from research grants and contracts. The university generates £1.117B in economic output and supports 11,000 jobs.

Technology Products


The easiest way to aggregate and get IT, Security, IoT and business answers from your Machine Data at a massive scale and speed to give you true insights.

Enterprise Security

Gain end-to-end visibility into your security posture with actionable intelligence that helps you prioritise and act fast.

"We're using Splunk to look at what is going on inside that environment in ways we couldn't see before and continuing to improve our protection around research data related to commercial research, intellectual property and patents, because that is our crown jewels. We're wrapping Splunk around these really important areas and around student data, because we know those are our biggest risks."
- Chief Information and Digital Officer


Universities have a variety of challenges in the current digital age. Many hold large quantities of intellectual property from research which is a high value target to both foreign and domestic institutions. Research shows that higher education institutions are increasingly becoming the target of security threats.

Many universities were at the leading edge with digital technology and networking before the turn of the century helping to develop the modern internet as we know it. This has led to many legacy and bespoke solutions still existing within their environments which struggle to conform with modern security standards and requirements.

The University approached Somerford to help them develop a solution that took them from reacting to threats, to proactively prevent and predict attacks across all aspects of their security and IT operations.


A rollout of Splunk Enterprise with Splunk Enterprise Security over a three month period by Somerford Associates provided a strategic change to security operations with the following benefits and values being provided:


Complete visibility of data flow across all layers.

Real-Time Analysis

System data available in real time for analysis as soon as source is identified and ingested.


Increase business productivity through real time analytics and dashboards.

Isolate Risks

Reduce risk to the business through complete visibility of potential risks and rapid identification of threats.

Why Somerford?

The quality and capacity of Somerford’s certified and security cleared consultants, its end-to-end assured delivery model and its value added package of knowledge transfer workshops and webinars, support desk on-site health checks and business value assessments. Somerford were able to deliver a zero to full SIEM solution in only 8 weeks. 

Get the same for your business

Schedule a call with one of our certified engineers and pre sales team. Or drop us a line if you have any questions.

Scroll to Top