DRAFT PD.pdf

1 | 3

PURCHASE DESCRIPTION

FY23 Splunk HQ Bulk Buy

1. INTRODUCTION

Splunk software is used across the Warfare Centers to meet IT and Cybersecurity requirements for log retention, analysis, and reporting.

2. BACKGROUND

References:

NAVSEA Instruction 5239.2B, 19 Jan 2018 NAVSEA LOGGING COMPLIANCE REQUIREMENT 5520 Ser 03/129 31JAN 23 Cyber Event Data Logging Implementation, 5239, Ser 03/00705, Jan 21 NAVSEA Cyber Event Data Logging (NCEDL) Implementation Memo).

DON CIO-ASN FMC-ASN RDA Joint Memorandum of 22 Feb 2012 Subj: Mandatory Use of Department of the Navy Enterprise Licensing Agreements

NAVSEA\SEA03 established Splunk Enterprise and Splunk Enterprise Security commercial off the shelf software as the Enterprise Security Information and Event Management (SIEM) tool required to meet cybersecurity requirements. As a result, Naval Surface Warfare Centers (NSWC) and Naval Undersea Warfare Centers (NUWC) are required to procure, develop, support, and maintain Splunk software licenses and developed capabilities.

The Department of Defense (DoD) Enterprise Software Initiative (ESI) established a Blanket Purchase Agreement with Carasoft for Splunk software and services (Contract No: N66001-20-A-0022) through July 14 2029 which shall be used.

NSWC/NUWC Head Quarters is consolidating Splunk procurement requirements across the 10 divisions to simplify procurement and standardize implementation. This procurement action will extend the current Splunk solutions.

Splunk’s ingest model is used to establish pricing along Enterprise (data ingest), Enterprise Security (computation and data consumption), IT Service Intelligence (threat detection and response), and Security Orchestration, Automation, and Response (SOAR) product line capabilities.

3. REQUIREMENTS

NAVSEA Warfare Center (WC) Divisions require brand name, Splunk Enterprise, to provide Navy enterprise-wide support for logging, log aggregation, and log analysis. In accordance with DoD ESI Agreement, Contract # N66001-20-A-0022, Carahsoft Technology, Corp. shall provide all of the following Splunk items listed below:

CLIN BRAND

NAME

PART # DESCRIPTION QTY

0001 Splunk PH-T-LIC-U-ST-

5US-ITAM022

Phantom - Term User Seat License with Standard Support - User - 5 User Seats

3 Each

0002 Splunk SE-100GB-ET-

ITAM022

Splunk Enterprise Annual + Enterprise Support 1 Year

47 Each

0003 Splunk SE-10GB-ET-

ITAM022

Splunk Enterprise Annual + Enterprise Support 1 Year

7 Each

0004 Splunk APP-SESS-100GB-

ET-ITAM022

Splunk App for Enterprise Security Annual 100GB/day 4600 of 4620 GB (Renewal)

46 Each

0005 Splunk APP-SESS-20GB-

ET-ITAM022

Splunk App for Enterprise Security Annual 20GB/day 20 of 4620 GB (Renewal)

1 Each

0006 Splunk IT-T-LIC-ST-

100GB-ITAM022

Splunk IT Service Intelligence - Term License with Standard Success Plan - 100GB/day - 1YR 1000 of 1010 GB (Renewal)

10 Each

2 | 3

0007 Splunk IT-T-LIC-ST-10GB-

ITAM022

Splunk IT Service Intelligence - Term License with Standard Success Plan - 10GB/day - 1YR 10 of 1010 GB (Renewal)

1 Each

3 | 3

ADDITIONAL INFORMATION

A. PERIOD OF PERFORMANCE / REQUIRED DELIVERY DATES

B. PLACE OF PERFORMANCE

C. SHIPPING ADDRESS

D. INSPECTION AND ACCEPTANCE

E. TECHNICAL POINT OF CONTACT

TBD

TBD