Ordering guide

Cisco public

Splunk Ordering
Guide
October 2024

© 2024 Cisco and/or its affiliates. All rights reserved. Page 1 of 22

-
 Contents
Introduction ................................................................................................................................................ 3
Purpose ................................................................................................................................................................. 3
Audience................................................................................................................................................................ 3
Scope..................................................................................................................................................................... 3
The Products ............................................................................................................................................... 3
Cisco Splunk Software Subscription ........................................................................................................................... 3
Splunk Cloud Platform ............................................................................................................................................. 4
Splunk Enterprise ................................................................................................................................................... 5
Splunk Observability Cloud..................................................................................................................................... 5
Splunk SOAR .......................................................................................................................................................... 6
The Services ................................................................................................................................................ 7
Splunk Success Plans .............................................................................................................................................. 7
Splunk Professional Services................................................................................................................................... 8
Splunk Professional Services: Non-Renewable ........................................................................................................ 8
Value Acceleration Services and General Consulting Services .................................................................................. 8
Quoting and Ordering Process .................................................................................................................... 11
Select the Subscription PID................................................................................................................................... 11
Select the Products .............................................................................................................................................. 12
Select Services ..................................................................................................................................................... 15
Add Learning Services to the Quote ...................................................................................................................... 16

© 2024 Cisco and/or its affiliates. All rights reserved. Page 2 of 22

-
 Introduction

Purpose, audience, and scope

Purpose
The ordering guide is designed to help sales and approved partners and distributors order Splunk products and services. This
guide will help you:
● Understand Splunk products and service offers and identify the right solution for your customers

● Make sure that the right quantities and types of parts are selected to reduce the risk of order rejection
● Provide information about the quote-to-order process for these offers
Audience
This guide is intended for sales, partners, and distributors qualified to sell Splunk products and services on the Cisco Global
Price Lists (GPL).
Partners are required to be both a Cisco certified and Splunk badged partner:
● Splunk Sell Associate or higher and Cisco Integrator Select or higher, or
● Splunk MSP or higher and Cisco Provider Select or higher

Distributor eligibility includes:

● Cisco Customer Experience (CX) Specialization
● Cisco Advanced Security Specialization
● Splunk Sell (Resell) & Manage (MSP) fundamental enablement
● Enterprise Agreement (EA) Accreditation: Distributor Center of Excellence for Enterprise Agreements

Scope
The ordering guide provides information about quoting and ordering the following Splunk products and services that are
available on the Cisco Global Price List (GPL):
● Splunk Cloud Platform
● Splunk Enterprise
● Splunk Observability Cloud
● Splunk SOAR
● Splunk Services

The Products
Cisco Splunk Software Subscription
Splunk delivers digital resilience in ways no one else can, unified by a flexible platform that provides enterprise scale data
management. The Cisco Splunk Subscription offers its products in a subscription PID listed below. This is the top line that will
be entered into Cisco Commerce Workspace (CCW). Further product selections regarding the Cisco Splunk Subscription
occur at the billing PID level, during the configuration of this subscription PID.

Table 1. Subscription PID

Subscription PID

SPLUNK-SUB

© 2024 Cisco and/or its affiliates. All rights reserved. Page 3 of 22

-
 Splunk Cloud Platform
Splunk Cloud Platform delivers the benefits of award-winning Splunk Enterprise as a cloud-based service. Using Splunk Cloud
Platform, customers gain the functionality of Splunk Enterprise for collecting, searching, monitoring, reporting, and analyzing
real-time and historical machine data using a cloud service that is centrally and uniformly delivered by Splunk to its large
number of cloud customers, from Fortune 100 companies to small and medium-size businesses.

Table 2. Splunk Cloud Platform Products

Product ID Description

SK-SE-CLD-SV-S Splunk Cloud Platform - Standard Sub per SVC

SK-SE-CLD-SV-P Splunk Cloud Platform - Premium Sub per SVC

SK-SE-CLD-SV-ENC-S Splunk Cloud Platform - Standard Encrypted Sub per SVC

SK-SE-CLD-SV-ENC-P Splunk Cloud Platform - Premium Encrypted Sub per SVC

SK-SE-CLD-SV-CP-S Splunk Cloud Platform - Std Compliance and Enc Sub per SVC

SK-SE-CLD-SV-CP-P Splunk Cloud Platform - Prem Compliance and Enc Sub per SVC

SK-SE-SV-SOR-T Splunk Cloud Subscription - Storage TU 500GB

SK-SE-SV-SOR-ENC-T Splunk Cloud Subscription - Storage Enc TU 500GB

SK-SE-SV-ARC-T Splunk Cloud Subscription - Dynamic Arch TU 500GB

SK-SE-SV-ARC-ENC-T Splunk Cloud Subscription - Dynamic Arch Enc TU 500GB

SK-SE-CLD-S Splunk Cloud Subscription - Std success GBday

SK-SE-CLD-P Splunk Cloud Subscription - Prem success GBday

SK-SE-SOR Splunk Cloud Subscription - Additional storage 500GB

SK-SE-ARC Splunk Cloud Subscription - Dynamic Arch STD

SK-SE-CLD-ENC-S Splunk Cloud Subscription - Enc Std GBday

SK-SE-CLD-ENC-P Splunk Cloud Subscription - Enc Prem GBday

SK-SE-CLD-CP-S Splunk Cloud Subscription - Std Compliance and Enc Sub GBday

SK-SE-CLD-CP-P Splunk Cloud Subscription - Prem Compliance and Enc Sub GBday

SK-SE-SOR-ENC Splunk Cloud Subscription - Additional Storage Enc 500GB

SK-SE-ARC-ENC Splunk Cloud Subscription - Dynamic Storage Enc 500GB

SK-ES-CLD-SV-S Splunk Cloud - Ent Security - Sub w Std Success Plan-per SVC

SK-ES-CLD-SV-P Splunk Cloud - Ent Security - Sub w Prem Success Plan-per SVC

SK-ES-CLD-S Splunk Cloud - Ent Security - Sub with Std Success - GBd

SK-ES-CLD-P Splunk Cloud - Ent Security - Sub with Prem Success - GBd

SK-IT-CLD-SV-S Splunk Cloud - IT Service Intel - Sub with Std Success - SVC

SK-IT-CLD-SV-P Splunk Cloud - IT Service Intel - Sub with Prem Success - SVC

SK-IT-CLD-S Splunk Cloud - IT Service Intel - Sub with Std Success - GBd

SK-IT-CLD-P Splunk Cloud - IT Service Intel - Sub with Prem Success - GBd

© 2024 Cisco and/or its affiliates. All rights reserved. Page 4 of 22

-
 Splunk Enterprise
Splunk Enterprise is a software product that enables customers to search, analyze, and visualize the data gathered from
the components of their IT infrastructure or business. Splunk Enterprise takes in data from websites, applications,
sensors, devices, and so on. After customers define the data source, Splunk Enterprise indexes the data stream and
parses it into a series of individual events that can be viewed and searched.

Table 3. Splunk Enterprise Products

Product ID Description

SK-SE-LIC-S Splunk On-Prem - Ent - Term License with Std Success - GBday

SK-SE-LIC-P Splunk On-Prem - Ent - Term License w Prem Success - GBday

SK-ES-LIC-S Splunk On-Prem - Ent Security - Term with Std Success - GBd

SK-ES-LIC-P Splunk On-Prem - Ent Security - Term with Prem Success - GBd

SK-IT-LIC-S Splunk On-Prem - IT Service Intel - Term w Std Success - GBd

Splunk Observability Cloud

Splunk Observability Cloud’s suite of products and features allow quick and intelligent response to outages and root cause
identification, while also providing the data-driven guidance needed to optimize performance and productivity going
forward. Splunk Observability Cloud search can be used to quickly locate service, traceID, dashboard, chart, or metrics-
based content.

Table 4. Splunk Observability Cloud Products

Product ID Description

SK-OBC-CLD-IO-S Splunk Obs Cloud - Infra, Ent with Std Success

SK-OBC-CLD-IO-P Splunk Obs Cloud - Infra, Ent with Prem Success

SK-OBC-CLD-AIO-S Splunk Obs Cloud - App Infra, Ent with Std Success

SK-OBC-CLD-AIO-P Splunk Obs Cloud - App Infra, Ent w Prem Success

SK-OBC-CLD-E2E-S Splunk Obs Cloud - End-to-End, Ent w Std Success

SK-OBC-CLD-E2E-P Splunk Obs Cloud - End-to-End, Ent w Prem Success

SK-OBC-CLD-CIO-S Splunk Obs Cloud - Infra, Commercial Edition

SK-OBC-CLD-CAIO-S Splunk Obs Cloud - App Infra, Commercial Edition

SK-OBC-CLD-CE2E-S Splunk Obs Cloud - End-to-End, Commercial Edition

SK-IM-SN-HOST Splunk Obs - Infra Monitoring Std Edition - Host

SK-IM-SN-CAD Splunk Obs - Infra Mon Std Edition - Container Add-on

SK-IM-SN-CMAD Splunk Obs - Infra Mon Std Edition - Custom Metric Add-on

SK-IM-EN-HOST Splunk Obs - Infra Monitoring Ent Edition - Host

SK-IM-EN-CAD Splunk Obs - Infra Monitoring Ent Edition - Container Add-on

SK-IM-EN-CMAD Splunk Obs - Infra Mon Ent Edition - Custom Metric Add-on

SK-IM-SN-MTS Splunk Obs - Infra Monitoring Standard Edition (MTS)

SK-IM-EN-MTS Splunk Obs - Infra Monitoring Enterprise Edition (MTS)

SK-APM2-SN-HOST Splunk Obs - APM Standard Edition with Profiling - Host

© 2024 Cisco and/or its affiliates. All rights reserved. Page 5 of 22
-
 SK-APM2-SN-CAD Splunk Obs - APM Standard Edition - Container Add-on

SK-APM2-SN-MMAD Splunk Obs - APM Std Edition - Monitoring MetricSet Add-on

SK-APM2-SN-TMAD Splunk Obs - APM Std Edition - Troubleshoot MetricSet Add-on

SK-APM2-SN-TVAD Splunk Obs - APM Standard Edition - Trace Volume Add-on

SK-APM2-EN-HOST Splunk Obs - APM Enterprise Edition with Profiling - Host

SK-APM2-EN-CAD Splunk Obs - APM Enterprise Edition - Container Add-on

SK-APM2-EN-MMAD Splunk Obs - APM Ent Edition - Monitoring MetricSet Add-on

SK-APM2-EN-TMAD Splunk Obs - APM Ent Edition- Troubleshoot MetricSet Add-on

SK-APM2-EN-TVAD Splunk Obs - APM Enterprise Edition - Trace Volume Add-on

SK-APM2-SN-TAPM Splunk Obs - APM Standard Edition - TAPM

SK-APM2-EN-TAPM Splunk Obs - APM Enterprise Edition - TAPM

SK-APM-EN-PFL-CAD Splunk Obs - Profiling Enterprise Edition - Container Add-on

SK-APM-EN-PFL-PVAD Splunk Obs - Profiling Ent Edition - Profile Volume Add-on

SK-APM-EN-PFL-TAPM Splunk Obs - APM Enterprise Edition with Profiling - TAPM

SK-APM-SN-PFL-CAD Splunk Obs - Profiling Standard Edition - Container Add-on

SK-APM-SN-PFL-PVAD Splunk Obs - Profiling Std Edition - Profile Volume Add-on

SK-APM-SN-PFL-TAPM Splunk Obs - APM Standard Edition with Profiling - TAPM

SK-RUM-CLD-S Splunk Obs - RUM Standard Edition - 10k Sessions per Month

SK-RUM-CLD-ENT Splunk Obs - RUM Enterprise Edition - 10k Sessions per Month

SK-SYN-CLD-SN-BR Splunk Obs - Synth Std Edition - 1K Browser Test Runs per Mo

SK-SYN-CLD-EN-BR Splunk Obs - Synth Ent Edition - 1K Browser Test Runs per Mo

SK-SYN-CLD-SN-API Splunk Obs - Synth Std Edition - 10K API Test Runs per Mo

SK-SYN-CLD-EN-API Splunk Obs - Synth Ent Edition - 10K API Test Runs per Mo

SK-SYN-CLD-SN-UP Splunk Obs - Synth Std Edition - 10K Uptime Test Runs per Mo

SK-SYN-CLD-EN-UP Splunk Obs - Synth Ent Edition - 10K Uptime Test Runs per Mo

SK-VO-FS-S Splunk Obs - On-Call Enterprise

SK-VO-RO-S Splunk Obs - On-Call Read Only Users

Splunk SOAR
Splunk SOAR (Cloud) is a Security Orchestration, Automation, and Response (SOAR) system that is delivered as a SaaS
(software-as-a-service) solution hosted and managed by Splunk or can be deployed On-Premises that customers can
install and configure in their own environments.

Table 5. Splunk SOAR Products

Product ID Description

SK-SOAR-CLD-U-S Splunk Cloud - SOAR Sub with Std Success - User Seats

SK-SOAR-CLD-U-P Splunk Cloud - SOAR Sub with Prem Success - User Seats

SK-PH-LIC-U-S Splunk On-Prem - SOAR - Term User Seat with Std Spyt - User

SK-PH-LIC-U-P Splunk On-Prem - SOAR - Term User Seat with Prem Spt - User
© 2024 Cisco and/or its affiliates. All rights reserved. Page 6 of 22
-
 The Services
Splunk Success Plans
Splunk Success Plans (Standard and Premium) are included with the purchase of a Splunk product. No additional
products or fees are required to receive these services. Success Plans provide Technical Support, OnDemand Services
(ODS), and Education (EDU) that enable customers to get the most out of Splunk’s services.
Customers can choose either the Standard or Premium Success Plan as described in the table below.
Note: All Success Plan credits must be consumed within the time period specified. At the end of the applicable period, any
remaining credits will expire, and no refunds will be provided for unused credits.

Table 6. Splunk Success Plans

Support Standard Success Plan Premium Success Plan (Optional Purchase) *

Support Standard Premium

OnDemand Services 10 ODS credits per quarter 30 ODS credits per quarter

Education 700 EDU credits per year 2500 EDU credits per year

Eligibility Criteria for ODS and Splunk Platform (cloud or on-prem term): Splunk Platform (cloud or on-prem term): minimum purchase of 1TB, 100
EDU Credits minimum purchase of 250GB, 50 vCPU or vCPU or 50 SVC
20 SVC

Observability Cloud Enterprise Edition**: minimum purchase of 500

Observability Cloud Enterprise Edition**: Infrastructure hosts, 300 Infrastructure and Application hosts or 300 End to
minimum purchase of 200 Infrastructure End hosts
hosts, 100 Infrastructure and Application
hosts or 100 End to End hosts

*Customers have the option to purchase the same Splunk product with a Standard Success Plan instead
**A la carte and Commercial Edition Observability products do not include ODS or EDU credits

Table 7. Success Plans: Support Response Details

Priority Support Standard Success Plan Premium Success Plan

P1 Availability 24/7 x 365 24/7 x 365

Response Time 2 hours 30 min

P2 Availability 8-5 business days 24/7 x 365

Response Time 1 business day 1 hour

P3 Availability 8-5 business days 8-5 business days

Response Time 2 business days 4 hours

P4 Availability 8-5 business days 8-5 business days

Response Time 2 business days 1 business day

© 2024 Cisco and/or its affiliates. All rights reserved. Page 7 of 22

-
 For more information on the support and services included with Splunk products, review the Success Plan Overview.
Splunk Professional Services
Splunk professional services enable customers to get the most value from Splunk products. Splunk professional services
provide strategic guidance, tools and resources that accelerate time to value and optimize solutions.

Splunk Professional Services: Non-Renewable

Splunk Professional Services include tasks and activities selected from the following Services:
● Value Acceleration and Optimization Services provide customers with the technical expertise to assist their
business with realizing and/or optimizing the potential value of Splunk products.
● General Consulting Services provide customers with domain-specific general consultation, as specified within a
scope of work document, regarding how they can best leverage Splunk products to solve unique and/or complex
business problems.
● Staff Augmentation Services provide customers with regular and recurring access to a technical resource which
include technical skills on a specific Splunk product.

Value Acceleration Services and General Consulting Services

Value Acceleration and General Consulting Services for Daily Rates are available to purchase either pre-paid with a set of
standard deliverables (Table 8) or post-delivery invoicing (Time and Material) through a Statement of Work (Table 9).
Additional service capabilities for Daily Rates can be found in the Splunk Professional Services Catalog.

The pre-paid services in Table 8 can be ordered in CCW using a set of standard deliverables.

Table 8. Splunk Professional Services (non-renewable subscriptions)

ATO Service Name Description Cisco SKU

SK-PST-SUB ● Value Acceleration and Splunk Professional Services Daily Rate ● SVS-SK-PS-DAY
Optimization
● Services General Consulting
Services Splunk Professional Services Daily Rate - ● SVS-SK-PS-DAY-C
Cleared Resource

Splunk Professional Services Daily Rate ● SVS-SK-PS-DAY-R

(Remote)

Splunk Professional Services - Project ● SVS-SK-PS-PM-DAY

Management - Daily Rate

Splunk Professional Services - Project ● SVS-SK-PS-PM-DAY-R

Management - Daily Rate (Remote)

Splunk Professional Services - Premium ● SVS-SK-PS-PREM

Daily Rate

Splunk Professional Services - Premium ● SVS-SK-PS-PREM-R

Daily Rate (Remote)

© 2024 Cisco and/or its affiliates. All rights reserved. Page 8 of 22

-
 Splunk Professional Services - Premium ● SVS-SK-PS-PREM-C
Daily Rate - Cleared

Splunk Services Unit 1 unit (PS-only) ● SVS-SK-PS-UNIT-1

● Staff Augmentation Services Splunk Professional Services, Consultant ● SVS-SK-PS-STFAUG

Staff Augmentation (Time & Expense not
included)

Splunk Professional Services, Consultant ● SVS-SK-PS-STFAUG-C

Staff Augmentation (Time & Expense not
included) - Cleared Resource

The services listed in the table above are available to customers for the duration of their service term. The number of
business days or number of credits customers purchase will be detailed within the quote.

Splunk Professional Services Time and Material for Daily Rate Services
Customers who require a custom set of deliverables and/or want to be invoiced post-delivery and monthly based on actuals
can purchase the Splunk services in Table 9 through Time and Materials. Splunk Time and Material Services are custom
scoped and priced and written on a Statement of Work (SOW). The SOW is used to define limitations of liability,
characteristics of delivery, payment terms, and other provisions.
Partners and Cisco Account Managers need to engage a Splunk Regional Sales Manager (RSM) to create an accurate
quote and SOW for Time and Material Services.
Table 9. Splunk Professional Services (non-renewable subscriptions)
Service Name Splunk Descriptions Cisco Splunk T&M SKU

Splunk Time and Splunk Professional Services Daily Rate T&M CX-SKAT-PS-TM
Materials Services
o Options for Remote, Onsite and Cleared resources
Splunk Professional Services - Project Management - Daily Rate T&M
o Options for Remote, Onsite and Cleared resources
Splunk Professional Services - Premium Daily Rate T&M
o Options for Remote, Onsite and Cleared resources

Note: Splunk Time and Material Daily Rate Services are not available in Germany, Italy, or Japan. Customers ordering in
these countries can order the Daily Rate prepaid professional services listed in Table 8.

Splunk Professional Services: Renewable Subscriptions

Splunk Professional Services Subscription provides technical advisory and guidance to customers at any stage of the
journey. Splunk Subscriptions are annual services with the service commencing from the date of purchase or invoice.

Table 10. Splunk Professional Subscription Services (renewable subscriptions)

© 2024 Cisco and/or its affiliates. All rights reserved. Page 9 of 22
-
 ATO Service Name Description Cisco SKU

OnDemand Service Credits can be used to receive a

SPLUNK- SUB Splunk Subscription ● SVS-SK-PS-OD-S-1
predefined (remote) Professional Service as defined
OnDemand Services (ODS)
within the Splunk ODS Catalog.

Splunk Technical Account Provides access to a senior Cisco Splunk Enterprise and ● SVS-SK-CS-TAM-STD
Manager (TAM) Splunk Cloud Platform Accredited Specialist who will
assist with the technical adoption and use of Splunk
Enterprise and the Splunk Cloud Platform. A TAM is
available as an add-on purchase option for Success Plan
and OnDemand Services customers.

Splunk Assigned Expert Provides customers with access to a dedicated Cisco ● SVS-SK-SME-AE-STD
Service (AES) Splunk Senior Technical, Product Specialist Resource.
Assigned Expert guides customers in the planning,
coordination, implementation, and optimization of the
selected Splunk product(s).

Splunk Value Boost Provides customers with assistance in achieving business ● SVS-SK-CS-VB-S-STD
Standard Services (VBS) outcomes with Splunk products. Value Boost Standard is
made up of two service components:
Direct Reactive Advisory Assistance: provides up to five
(5) contacts within a customer’s organization access to a
designated Splunk Enterprise or Splunk Cloud certified
expert.
Proactive Services Engagement: provides an outcome
planning assessment delivered by a Splunk Product
Advisor, followed by an outcome execution engagement
delivered by a Splunk consultant.

Splunk Learning Services

Splunk Learning services are available for users and those who implement, configure, manage, and maintain the Splunk
environment. Learning Services offers provide the knowledge, insight, and hands-on lab experiences needed to help
customers implement and operate their Splunk solution.
The Splunk Education Basic Subscription Service is a one-year package providing access to single subject self-paced, lab-
supported courses designed to train anyone in a customer’s organization to become Search Experts and Knowledge
Managers. The Subscription learning courses provide flexible access to complete training anytime immediately upon
registration. There is no limit to the number of learners who can register from a customer’s organization.
Information regarding the available courses can be found in the Course Catalog.
Splunk Learning Services Credits can be used for any public Splunk Instructor-Led Training (ILT) class or eLearning with
Labs offering. The Learning Services Credits can also be used to purchase Certification Exam Vouchers. Customers have 12
months from the order date to use the learning credits.
Information regarding the available courses can be found in the Course Catalog.

To order Splunk Learning Services in Cisco Commerce Workspace, use the part numbers shown in Table 11.

Table 11. Splunk Learning Services

© 2024 Cisco and/or its affiliates. All rights reserved. Page 10 of 22

-
 ATO Service Name Description Cisco SKU

SK-LEARNING-SUB Splunk Learning Subscription One-year package providing access to single ● SVS-SK-LEARNING-S
subject self-paced, lab-supported courses ● Splunk Learning 1-Year Basic
designed to train anyone in the organization Subscription
to become Search Experts and Knowledge
Managers.

N/A Splunk Learning Credit Education Services Credits can be used on ● TRN-SK-LCREDIT*
any paid Splunk training offering. Companies ● Splunk Learning Services
can purchase training units for their Credit
employees to use through their sales
representatives.

*Not a SaaS SKU

Quoting and Ordering Process

Note: Partners and Cisco Account Managers need to engage a Splunk Regional Sales Manager (RSM) prior to creating a
Splunk quote in CCW. The Splunk representative will help scope the solution and build the quote for the customer.
Splunk products, embedded Success Plans, pre-paid Professional Services, and Learning Services can be ordered in CCW.
Cisco Commerce Workspace is the primary tool used for ordering Splunk products and services offered on Cisco’s Global
Price List.

Select the Subscription PID

There is one subscription PID (SPLUNK-SUB) and pricing is determined when product PIDs are added and configured.
After selecting the subscription PID, choose Requested Terms and Billing to edit the subscription term and the requested
start date.

The subscription term will default to a 12-month term and prepaid term billing. The requested start date may also be
changed at this time (up to 90 days from day of order). The requested start date may be changed until the provisioning
process begins, at which point the order will need to be cancelled and rebooked to change the start date. Start dates
cannot be made in the past.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 11 of 22

-
 ● Only terms that are 12 to 60 months are allowed
● A Purchase Order (PO) needs to be issued for the full amount; billing will occur annually
● While billing is annual, the subscription is for the entire term and cannot be cancelled mid-term. The service is
provisioned, and the subscription starts on the service start date. Provisioning the service may take up to 72
hours, assuming the order information is complete. To avoid delays, please ensure the END CUSTOMER
information is complete and accurate.

Select the Products

When the subscription terms have been set, the next step is to add products and user types to the subscription. The
duration of the product is defined by the subscription term.
Start by selecting the Success Plan for the subscription.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 12 of 22

-
 Having chosen a success plan, the next step is to select the products and/or services to be ordered.

The guidance below uses Splunk Cloud Platform as an example. After choosing Splunk Cloud Platform the next selection
is to decide which pricing model for the subscription. Select either Splunk Cloud Ingest or Splunk Cloud Workload.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 13 of 22

-
 The guidance below uses Splunk Cloud Ingest as an example. After selecting Splunk Cloud Ingest, choose the Cloud Ingest
deployment for the subscription.

Data Add-ons can be added to the subscription.

Once complete, click on the Service tab to continue with completing the subscription order.
© 2024 Cisco and/or its affiliates. All rights reserved. Page 14 of 22
-
 Select Services
To add pre-paid professional services, click the Services tab.

For each service, enter the desired quantity and click the “+ Add” button.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 15 of 22

-
 The Summary tab will update to show every newly added service. Click “Back to Subscription” at the bottom of the screen
to complete Services selection.

Add Learning Services to the Quote

To add Splunk Learning Services, select SK-LEARNING-SUB. The Learning subscription is automatically selected for a 12-
month period. Click ‘Verify & Save’ to save changes and then ‘Save and Continue.’

© 2024 Cisco and/or its affiliates. All rights reserved. Page 16 of 22

-
 Include Necessary Provision and Order Details
After completing the configuration of the offer, click on the “View/Edit” hyperlink under “Provision Details” and provide
an email by using the “add provisioning email” function.

The provisioning details must be provided to continue. These selections should match the product selections from the
offer configuration and align with the information provided by the Cisco / Splunk teams to avoid delays in provisioning.
Please refer to the screenshots below for guidance.

Step 1. Complete the necessary fields for each Provision Grouping (ex: Splunk, Cloud Ingest, Cloud Workload, SOAR Cloud,
Observability).
Please note that only products selected in the offer configuration will require provisioning details.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 17 of 22

-
 Step 2. Continue to complete the required provisioning details and select the appropriate options from the dropdown
menus.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 18 of 22

-
 Step 3. Once all required fields are completed, select “Save and Continue”.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 19 of 22

-
 Subscription Changes
Note: Partners and Cisco Account Managers need to engage a Splunk Regional Sales Manager (RSM) prior to modifying an
existing Splunk subscription in CCW. The Splunk representative will help scope the solution and ensure no impacts to the
existing subscription.

Step 1. To change the subscription, select Cloud/SaaS Subscriptions under the Services & Subscriptions tab

Step 2. Search for the active subscription and click to see the subscription details

© 2024 Cisco and/or its affiliates. All rights reserved. Page 20 of 22

-
 Step 3. Select the Modify/Renew button.

Step 4. Partners and Cisco Account Managers are now able to adjust the products and quantities.

To change products or quantities, select “Modify My Subscription” and select the appropriate product in the subscription
configuration summary.

© 2024 Cisco and/or its affiliates. All rights reserved. Page 21 of 22

-
 Printed in USA C07-2997570-00 7/24
© 2024 Cisco and/or its affiliates. All rights reserved. Page 22 of 22
-