Two key things to explore if you a ingesting Cisco-generated data into Splunk and keen to optimise.
2 Sept 2026
Originally published on LinkedIn ↗
Two key things to explore if you a ingesting Cisco-generated data into Splunk and keen to optimise.
Integrated Enterprise Value (IEV) is a Splunk benefit for eligible Cisco-generated data. When Cisco data is ingested into Splunk with a supported sourcetype, that eligible data counts at a 0.5x weighted ingest rate for applicable entitlement consumption. For example, 20 GB/day of eligible Cisco data counts as 10 GB/day of effective commercial consumption.
Machine Data Lake lets you retain supported logs and events in economical object storage without deciding at ingest time whether every event must be indexed. Land data in a raw table, discover it in the Catalog, and promote the data required for indexed search or structured analytics when a use case arises. Eligible data can also be accessed through supported Open Sharing clients.