Specifications include, but are not limited to: The MSSP will monitor the Splunk System on a 24/7 basis, maintain the stability of the Splunk system through updates and configuration, and identify and report all issues to Splunk and the College. The MSSP will make recommendations and submit them to College administrators for approval, prior to working with Splunk to implement any recommendations. The MSSP shall provide the following: Monitor, and tune the Splunk w/ Enterprise Security system o Tune is an industry term used to mean modify existing rules to reduce false alerts. Manage the Splunk Environment o Test software upgrades and patches before production deployment o Obtain maintenance window times from College Information Security staff to apply software upgrades and patches Monitor 24/7 the system health, performance and availability of Splunk and notify College Information Security of any potential or actual issues that impact the service.
