You have to buy Splunk Enterprise Security separately and the cost is usually a percentage of the Enterprise license cost.
For example, if you buy a 10GB license and want ES:
Hope that helps.
Don't think so. I know this cause I've done it several times.
The best thing you can do is to contact your account manager or Splunk sales and they will go through it with you in great detail.
If you like the answer please don't forget to upvote it