Splunk Upgrade and Maintenance

The Splunk Enterprise solution is used at Federal Student Aid (FSA) U.S. Department of Education, to provide Security Information and Event Management (SIEM) capabilities, specifically as it relates to the correlation of security device events with application architecture log events. This solution improves FSA's security posture with regard to the Office of Management & Budget (OMB) 08-05 Memorandum on Trusted Internet Connection and OMB 09-32 Update on Trusted Internet Connection Initiative as it relates to monitoring and reporting security incidents and PII breach attempts to US-CERT. Splunk also improves FSA's compliance with incident response guidelines outlined in NIST SP. The requirement is for the following: - Splunk Enterprise Perpetual License Upgrade (SEU-GB-P) with Support (ES-GB-P-U); License Type - GB per day; Quantity - 400 GB per day - Splunk Enterprise Security App Upgrade (APP-SESSU-200GBP) with Support (APP-SESS-ES-GBP-D); License Type - GB per day; Quantity - 400 GB per day - Splunk Professional Services Deployment (EDU-BUSR-1), Quantity - 5 days - Training: - Using Splunk Course (EDU-BUSR-1) , Quantity - 1 student - Searching and Reporting with Splunk (EDU-SRPT-1), Quantity - 1 student - Creating Splunk Knowledge Objects (EDU-KNWL); Quantity - 1 student - Using Splunk Enterprise Security (EDU-UESS-1), Quantity - 1 student - Support for existing licenses