IEV Evaluation by August Schell

IEV Evaluation by August Schell shows what Splunk Integrated Enterprise Value (IEV) for Cisco data is worth in your environment. Under IEV, eligible Cisco data ingested with a supported sourcetype counts at a 0.5x weight against applicable ingest entitlement. Most organizations do not know how much of their ingest qualifies. This app measures it. The app matches your ingest by sourcetype against the list of IEV eligible sourcetypes published by Splunk, then shows actual ingest, eligible Cisco ingest, effective license consumption and estimated savings. It also finds Cisco data that is not landing on an eligible sourcetype, so you can see value being left on the table before your renewal. Volume can come from license usage (license_usage.log), from an estimate based on tstats event counts and sampled event sizes when license data is not visible, or from built in demo data. The app runs entirely at search time with no Python, custom JavaScript, modular inputs, data models or external network calls, so it works in air gapped and FIPS environments and in Splunk Cloud Platform. Results are estimates for planning. Splunk validates eligible usage and determines actual IEV treatment under your order and applicable terms.