Specialist expertise for
projects and acceleration.
We provide temporary expertise and capacity for design, implementation, migration and optimisation, without you taking on an ongoing service. A five-day health check at a fixed price is usually the best starting point: afterwards you know where you stand and in which order to continue.
Six kinds of engagement.
We provide consultants, engineers and data specialists who help design, implement, migrate, optimise and train.
- Splunk implementations, cloud and platform migrations
- Data integration, data onboarding and data quality improvement
- Dashboard development, SPL optimisation, reporting and use case development
- Security monitoring, SIEM use cases and compliance-oriented reporting
- Health checks, performance improvement and clearing technical debt
- Temporary reinforcement of SOC, data, platform or operations teams
The health check.
Five days, fixed price, one report: what is there, what the risk is, what it costs and in which order to tackle it. No obligation to continue.
- Architecture and configuration, topology, clustering and single points of failure
- Data and licensing, which sources come in, their quality, and what you pay for data nobody uses
- Usage and value, which dashboards and alerts are actually used
- Report with an order, findings with risk and impact, plus what you can pick up yourself
| Duration | 5 working days |
| Price | Fixed, known up front |
| Deliverable | One report plus a walkthrough |
| Commitment | None |
People who join your team.
You are not buying hours but a specialism, working inside your way of working and your change process. We agree up front what will be finished at the end of the period.
- Splunk Architect, for design choices you live with for years: topology, clustering, retention, data models and the cost model underneath.
- Splunk Engineer, hands that finish the list: data onboarding, configuration, forwarders, alerting, upgrades and overdue maintenance.
- Data Analyst, translates the business question into searches, data models and visualisations, and can explain the outcome.
- Temporary reinforcement, of SOC, data, platform or operations teams.
The smallest engagement is half a day. For longer work we run per sprint with an agreed deliverable. If the work is done early, we stop early.
Discuss a roleImplementations and migrations.
Platform projects rarely fail on technology. They fail on scope that keeps moving and on a handover that never happens. We work with fixed milestones and an explicit definition of done: it runs, it is documented, and somebody else can operate it.
- Implementation, design, build, hardening, data onboarding, testing and formal handover
- Migration to Splunk Cloud, with an impact analysis up front and an agreed fallback path
- Version upgrade, for environments running a release that is going out of support
- Consolidation, merging two environments after a merger or acquisition
- Data centre move, retaining history and evidence
- One document stating who does what
- Four milestones with acceptance
- Two weeks of aftercare
- Handover as a milestone, not as the last day
Dashboards and use cases.
Dashboards grow into a wall of panels nobody can read. We build one screen per question, with the conclusion in the title and one highlighted series. The rest is context.
- Use case design, which question, which data, who acts, and what the threshold is
- Custom dashboards, from a single screen to an application with its own navigation, in your own house style
- SPL optimisation and data models, searches that stay fast as you grow
- Reporting automation, the monthly handwork, set up properly once
- Security and compliance use cases, detections and evidence overviews that fit your risk
Without a managed service following on behind it.
Professional Services is not a stepping stone you are obliged to walk through. Plenty of customers take only an architect, an engineer or a use case and do the rest themselves. That is fine, and we say so when it is the sensible route.
Can you also second people for longer periods?
Yes. Per half-day, per sprint or ongoing. For longer engagements a volume rate is open to discussion; raise it with your contact.
Do you work within our change process?
Always. We adapt to your way of working, not the other way around. What we leave behind is documentation inside your environment.
What if we want to outsource later after all?
Then the step is small: we already know the environment. The findings from a health check or a project are literally the scope of the managed service.
Do you hold Splunk certifications?
Yes, and we invest in them. What matters more is that our people work in managed environments daily, and that is what you benefit from in a project.
Scale specialist knowledge temporarily without losing sight of accountability for results.
Send us your outstanding work list. We will tell you what it costs in days, and what you are better off keeping in house.