Splunk Cloud Expert Resume
Columbus, OhiO
SUMMARY:
- Over 7+ Years of Professional experience in the field of IT with multiple environments including Linux/UNIX, SQL, and 4 years of work experience on Splunk as both developer and Administrator.
- Experienced in Preparing, arranging and testing Splunk search strings and operational strings.
- Proficiency with the usage of various search commands like stats, chart, timechart, transaction, strptime, strftime, eval, xyseries, where, table and experience with the usage of Extract key word, sed and used Macros to reuse the searches etc.
- Parsing, Indexing, Searching concepts Hot, Warm, Cold, Frozen bucketing.
- Hands on experience in using the commands like rex, erex, sed and IFX to extract the fields from the log files.
- Extensive knowledge in creating accurate reports using XML, Dashboards, visualization and pivot tables for the business users.
- Expertise in optimizing traffic across network using Combiners, joining multiple schema datasets using Join and organizing data using Practitioners and Buckets.
- Knowledge on configuration files like props.conf, transforms.conf, output.conf etc.
- Extensive knowledge in creating accurate reports using XML, Dashboards, visualization and pivot tables for the business users.
- Maintained and managed assigned systems, Splunk related issues and administrators.
- Good knowledge on Objects such as Event Types, Tags, Field Extraction (Using Regular Expression), Lookups etc.
- Provided technical services to projects, user requests and data queries as well as supported change management processes.
- Analyzed and monitored incident management and incident resolution problems.
- Strong experience in splunk dashboard creation, app development, validation etc. Also aware of various quality concepts like SCM.
- Relevant experience with Splunk SDK for C#, Python, PHP and Java scripts for using splunk as a middle ware tool.
- Hands on experience with Amazon web services (AWS).
- Experience with Splunk technical implementation, planning, customization, integration with big data and statistical and analytical modeling.
- Have experience in configuring Indexers, Forwarders (Universal and Heavy), Search Heads, Deployment/Management servers, Deployment clients.
- Creating Dashboards with the help of Pivot in 6.3 ( Creating Data Models, Data Object )
- Configuring and Managing Tags and Event types.
- Index Time Extraction and Search Time Extraction of Fields, Parsing the Data in Forwarders
- Creating Applications on Splunk to analyze the Big Data.
- Indexing the data with the help of Scripted Input.
- Development of SPLUNK Queries to generate the Reports.
- Installed, Configured and used different Apps.
- Experience in automation using UNIX Shell Scripting and Python scripting.
- Knowledge on the splunk cloud migration and inspecting the apps using appinspect for errors.
- Troubleshooting and maintaining splunk Infrastructure in the organization.
- Attending splunk formal to implement best practices
TECHNICAL SKILLS:
Operating Systems: Windows 2000,2008, XP, Windows NT, Suse Linux, Red hat, VM Ware, IBM AIX
Splunk Modules: Splunk 6.2/6.3/6.4.1, Splunk on Splunk, Splunk DB Connect, Splunk Cloud, Splunk Common Informational Model, Splunk Add on for Microsoft Cloud services, Splunk Utilization Monitor, Splunk App for WebLogic Server and WebSphere Application Server, Monitoring of JMX, Splunk App for UnixDistributed Management Console etc.
Programming Language: C,C++, Java, Python
RDBMS: Oracle, MS - SQL Server, Sybase, IBM DB2
Web Technologies: HTML4/5, CSS3, DHTML, JavaScript, XML, XSL, XSLT
Web/App Servers: Apache Tomcat 6.0, web logic8.1/9.2, WebSphere Application Server 6,7,8, WebLogic, WebSphere MQ Server 6.x,/7.x, Jboss Application Server, IBM HTTP Server, Sun One webserver, IIS 7.x, Apache Webserver
Monitoring Tools: Splunk 5x, 6x, New relic, Dynatrace, Wily Introscope, Foglight, Tivoli, ELK
SCM Tools: Chef, SVN, JIRA, GitHub, Jenkins
Scripting: Shell, Batch, Java, Ruby s
PROFESSIONAL EXPERIENCE:
Confidential, Columbus, Ohio
Splunk Cloud Expert
Responsibilities:
- Designing, scaling out, and maintaining AWS Cloud-based infrastructure.
- Designing and writing code to develop and maintain systems which powers Splunk cloud services hosted in the public cloud.
- Developing Scripts and applications to automate system deployment scaling and infrastructure.
- Created Dashboards, report, scheduled searches and alerts.
- Created many of the proof-of-concept dashboards for IT operations, and service owners which are used to monitor application and server health.
- Developed, evaluated and documented specific metrics for management purpose.
- Created and configured management reports and dashboards.
- Developed Splunk infrastructure and related solutions as per automation toolsets.
- I have helped teams to on-board data, create various knowledge objects, install and maintain the Splunk Apps, TAs.
- Use techniques to optimize searches for better performance, Search time vs Index time field extraction. And understanding of configuration files, precedence and working.
- Field Extraction, Using Ifx, Rex Command and Regex in configuration files.
- Various types of charts Alert settings Knowledge of app creation, user and role access permissions.
- Creating and managing app, Create user, role, Permissions to knowledge objects.
- Use techniques to optimize searches for better performance, Search time vs Index time field extraction. And understanding of configuration files, precedence and working.
- Involved in standardizing Splunk forwarder deployment, configuration and maintenance across UNIX and Windows platforms. Parsing, Indexing, Searching concepts Hot, Warm, Cold, Frozen bucketing.
- Summary indexing and data modeling experience.
- Manipulated the Raw Data and Worked on Field Extraction using Commands Rex and Regex.
- Creating REST API calls. Provided technical services to projects, user requests and data queries.
- Error aggregation dashboard across all applications using Side view Utils.
- On boarding e-Commerce and other channel applications into Splunk environment.
- Summary indexes to accelerate the dashboard performance.
- Setting up alerts on critical conditions for monitoring teams for proactive monitoring.
- Supported data source configurations and change management processes.
- Installed, configured and managed Data Meer users on the Hadoop cluster.
- Involved in writing complex IFX, rex and Multikv command to extracts the fields from the log files.
- Developed, evaluated and documented specific metrics for management purpose.
- Worked closely with Nagios and ArcSight teams to get data into splunk and create alerts.
- Installed, tested and deployed monitoring solutions with Splunk services.
- Creating Dashboards according to the business needs using Advance XML
- Creating Applications on Splunk to analyze the Big Data
- Creating and Binding fields with the Splunk MetaData with the help of Regular Expression
- Index Time Extraction and Search Time Extraction of Fields, Parsing the Data in Forwarders
- Managing "Distributed Management Console" to assign proper roles to all boxes
- Search Head Clustering, Deploying Configuration Bundles through Deployer, etc
- Forwarding the data from a different applications to the indexers using UF/HF
- Writing a necessary / required R.E. to parse the data before indexing.
Environment: Splunk, Unix/Linux, Bash, Python, Rex, TCP/UDP, LDAP, PowerShell, Restful Services, Putty, Nagios
Confidential, Sunnyvale, CA
Splunk Resource
Responsibilities:
- Installed, tested and deployed monitoring solutions (Alerts, Dashboards and Reports) with Splunk services for different Application Teams.
- Logged mainframe data into splunk using syncsort Ironstream forwarder.
- Helped analysts in determining the SMF types needed to log into splunk.
- Created Common Information model to build data models correlating all the SMF types.
- Built Splunk dashboards using XML and Advanced XML as well as Created Scheduled Alerts for Application Teams for Real Time Monitoring.
- Prepared Daily, Weekly and Monthly Reports for Business according to requirement using Splunk and reported to Business in case of of any Data Mismatch or Data abnormality.
- Worked on Knowledge Objects such as EventyTypes, Tags, Field Extraction (Using Regular Expression), Lookups etc.
- Install, Configure and use different Apps such as SplunkDBConnect (for connecting to Databases), WMI (to monitor CPU and Memory Usage on Servers) etc.
- Provided technical services to projects, user requests and data queries as well as supported change management processes.
- Monitored all Critical Applications to save approximately 50% of Business Hours.
- Analyzed new Applications as well included them in our monitoring scope with the help of Incident Management and Change Management Teams.
- Analyzed and monitored incident management and incident resolution problems.
- Monitoring the performance of all the critical Servers using AppDynamics.
- Installing and configuring Splunk Forwarder on both Windows and Linux servers.
- Managing Splunk Forwarder via centralized deployment server.
- Installation as well as Configuration of Indexer, Search Head, License Server and Deployment Server on both Windows and Linux Servers.
- Developed Splunk Infrastructure on Cloud (Amazon AWS) in coordination with infrastructure Support Teams.
- Installing and Configuring Indexer, Search Head, License Server as well as Deployment Server on Cloud (Amazon AWS).
- LDAP Configuration in Splunk as well as segregation of Users on the basis of their Roles.
- Installed, tested and deployed monitoring solutions (Alerts, Dashboards and Reports) with Splunk services for different Application Teams.
- Build Splunk dashboards using XML and Advanced XML as well as Created Scheduled Alerts for Application Teams for Real Time Monitoring.
- Designing and Setting-Up the Splunk Architecture in the organization
- Creating and Binding fields with the Splunk MetaData with the help of Regular Expression
- Use of PostProcessing Concept to make the search faster/to load the dashboard faster.
- Trouble Shooting in Splunk related to Admin/Development.
- Forwarding the data from a different applications to the indexers using UF/HF
- Writing a necessary / required R.E. to parse the data before indexing
- Creating Dashboards with the help of Pivot in 6.2 ( Creating Data Models, Data Object )
- Index Clustering, Cluster Upgrade, etc
- Search Head Clustering, Deploying Configuration Bundles through Deployer, etc
- Trained the team to use dashboards and demonstrated about splunk.
- Collected business use cases by demonstrating splunk visualizations to the end users and business owners.
- Circled with partnership projects and presented the overview of the splunk by performing proof of concept with sample logs. support and maintain large Splunk environment in a highly available, redundant, dispersed environment
Environment: Splunk Enterprise6.2, Unix/Linux, Bash, Python, Rex, TCP/UDP, LDAP, PowerShell, Putty, Arc Sight, Mainframe z/os, Syncsort, Share Point
Confidential
Splunk Admin/Developer
Responsibilities:
- Installation, configuration and deployment of Splunk Forwarders, indexers, search heads and deployment server.
- Use Splunk Enterprise Security to configure correlation search, key indicators and risk scoring framework.
- Configuration and deployment of Splunk forwarder, search heads, indexer and deployment server.
- Work with Splunk GUI, command line interface and directly with configuration files.
- Configured Splunk multisite indexer cluster for data replication.
- Develop Splunk correlation searches to identify and address emerging security threats through the use of continuous monitoring, alerting and analytic.
- Experience developing Splunk queries and dashboards targeted at understanding application performance and capacity analysis.
- Have Knowledge in various search commands like stats, chart, time chart, transaction, strptime, strftime, Eval, where, XYseries table etc. and difference between event stats.
- Experience in working with Splunk authentication and permissions and having significant experience in supporting large scale Splunk deployments
- Install and maintain the Splunk adds-on including the DB Connect, Active Directory LDAP for work with directory and SQL database.
- Configure the adds-on app SSO Integration for user authentication and Single Sign-on in Splunk Web.
- Configure and Install Splunk Enterprise, Agent, and Apache Server for user and role authentication and SSO.
- Manage Splunk configuration files like inputs, props, transforms, and lookups.
- Create Splunk Search Processing Language (SPL) queries, Reports, Alerts and Dashboards.
- Creating Reports, Pivots, alerts, advance Splunk search and Visualization in Splunk enterprise.
- Provide power, admin access for the users and restrict their permission on files.
- Active monitoring of Jobs through alert tools and responding with certain action w.r.t to logs, analyses the logs and escalate to high level teams on critical issues.
- Splunk configuration that involves different web application and batch, create Saved search and summary search, summary indexes.
- Deployed applications on multiple WebLogic Servers and maintained Load balancing, High availability and Fail over functionality.
Environment: Splunk, Linux, Windows, Active Directory, LDAP, Single sign on, SQL, AppDynamics, Dynatrace, AWS, Splunk DB2 connect, Linux, Shell and Python Script.
Confidential
SQL Developer
Responsibilities:
- Installed SQL Server 2005 in production and development environments.
- Successfully upgraded from SQL Server 2000 to SQL Server 2005 on various Environments.
- Installed and Configured SQL Server 2005 using Surface Area Configuration.
- Worked in Active/Active Clustered Environment.
- Used SQL Loader to load data from flat files received from various facilities every day.
- Created and modified various UNIX shell scripts according to the changing needs of the project.
- Created and modified several database objects such as Tables, Views, Indexes, Constraints, Stored procedures, Packages, Functions and Triggers using SQL and PL/SQL.
- Experience in Dynamic SQL, Collections, and Exception Handling.
- Worked with the developers to get data from various data sources (SQL Server, flat files & XML)
- Experience with performance tuning of Oracle database using Explain Plan and Hints to perform cost-based optimization.
- Created stored procedures, functions and packages to move data from the staging tables to the data mart.
- Test, debug and take measures for query optimization.
Environment: MS SQL Server, SQL server MS SQL Server Integration Services, MS SQL Server Analysis Services, MYSQL, MS Visual Studio.