Cisco Splunk Cloud Subscription Fed and IL5 Addtl Storage 500 GB | Fed, IL5, Storage — SK-SOR-IL5-ENC

Address capacity and compliance needs in high-assurance environments by adding 500 GB of storage to Splunk Cloud Subscription for Fed and IL5 customers. This add-on is built to align with IL5 control requirements and the Splunk Cloud management plane, enabling teams to archive older indexed data while preserving searchable access for investigations and audits. Provisioning is handled through Splunk Cloud, so implementation requires no changes to forwarders or index-time configuration. The fixed 500 GB allocation simplifies procurement and cost forecasting for teams operating under strict budget controls. Use this SKU to extend retention windows, meet IL5 data handling policies, and avoid the higher cost of extended hot-tier storage. Ideal For Extend retention for IL5-classified audit logs without expanding hot storage Provision additional archive capacity for DoD or high-assurance tenants Support incident response by keeping historical indexed data searchable Simplify budget approval with fixed-size storage add-ons Why This Product 1 Meets IL5 control requirements where generic cloud storage may not provide required safeguards 2 Keeps archives searchable inside Splunk vs. exporting to external cold storage that breaks searchability 3 Fixed 500 GB allocation simplifies procurement compared with variable cost block storage 4 No forwarder or index changes required, unlike some on-prem archive solutions