SUMMARY:

• Multi - cultural experience of 8+ years IT experience and as Splunk administration and Splunk developer on varied projects which involves Design and Development of client/server. In platform consisting of Red Hat Linux, Windows, and Sun Solaris operating systems.
• 5+ years of experience in SPLUNK Administration, development, design, configuration, dashboard design, alerts, and scheduling
• Extensive experience in Installation, Configuration, and Migration, Trouble-Shooting and Maintenance of Splunk, Apache Web Server on different UNIX flavors like Linux.
• Expert in installing and using Splunk apps for UNIX and Linux Splunk Add-on nix.
• Hands on experience in installing Splunk TASSymantec DLP, Splunk DB connect Splunk App for AWS and more.
• Worked on Security solutions (SIEM) dat enable organizations to detect, respond and prevent these threats by providing valuable contextand visual insights to halp you make faster and smarter security decisions.
• Experience in providing monitoring and response to security events in Security Operations Center (SOC) team.
• Knowledge in optimize searches for better performance, Search time vs Index time field extraction and understanding of configuration files, precedence and working Props.conf, transforms.conf, inputs.conf, outputs.conf
• Experience in creating Access controls, to user by creating AD (Active Directory) groups power and user groups.
• Experience with Active Directory and SSO Single sign-On option.
• Configure teh add-on app SSO Integration for user authentication and Single Sign-on in Splunk Web.
• Expertise in using Splunk with shell script in creating scripts for various activities like Generating Server Status and Health reports,Deployments on large scale configuration of servers.
• Experience with Splunk technical implementation, Planning, customization, integration with big data and statistical and analytical modeling.
• Responsible in Scheduling Backups and Restore, Maintenance plans using Native & Third-party tools.
• Involved in standardizing Splunk forwarder deployment, configuration and maintenance across UNIX and Windows platforms.
• Experience in Splunk development (creating apps, dashboards, data models, etc.
• Experience on Splunk Enterprise Deployments and enabled continuous integration on as part of configuration management.
• Experience with Splunk Searching and Reporting modules - (Splunk ITSI and Enterprise Security App) Knowledge Objects
• Developed Hive UDFs and Pig UDFs using Python in Microsoft HDInsight environment.
• Administration, Dashboards, Clustering and Forwarder Management.
• Created and Managed Splunk DB connect Identities, Database Connections, Database Inputs, Outputs, lookups, access controls.
• Monitored Database Connection Health by using Splunk DB connects health dashboards.
• Expertise in creating accurate reports, Dashboards, Visualizations and Pivot tables for teh business users.
• Created Reports, Alerts and Dashboards by Splunk query language. Experienced in creating and running Cron Jobs for scheduled tasks.
• Parsing, Indexing, Searching concepts Hot, Warm, Cold, Frozen bucketing.
• Knowledge about Splunk architecture and various components (Indexer, forwarder, search head, deployment server).
• Set indexing property configurations, including time zone offset, custom source type rules. Configure Regextransformations to perform on data inputs.
• Helping application teams in on-boarding Splunk and creating Dashboard, Alert, and Reports etc. Experience on use and understand of complex Reg Ex (regular expressions).
• Various types of charts alert settings Knowledge of App creation, user and role access permissions.
• Creating and Managing Apps, Create user, role and Permissions to Knowledge objects.
• AppDynamics agent's configuration and instrumentation of applications. Field Extraction, Using IFX, Rex Command and Reg Ex in configuration files.
• Help development/support team to troubleshoot performance bottlenecks using AppDynamics tool.
• Validate AppDynamics implementation on UAT, Prod servers after each deployment.
• Knowledge of Extract keyword, Sed, Knowledge objects, Knowledge of various search commands like stats, chart, time chart, transaction, strptime, strftime, eval, where, xyseries, table etc.
• Designed, developed and implemented multi-tiered Splunk log collection solutions.
• Installed, configured and administered JBoss Application server 5.0, 7.0 in various environments.
• Installed, configured and administered Web Servers like Apache 2.x HTTP Server, Apache Tomcat 6.x, Sun One 6.x Web Server and Microsoft IIS Server for WebLogic plug-ins.
• Time chart attributes such as Span, Bins, Tag, Event types, Creating Dashboards, Reports using XML. Create Dashboard from search, Scheduled searches of Inline search vs. scheduled search in a Dashboard.
• Experience in all facets of SDLC viz. requirement analysis, designs, development, testing, and post implementation revisions.
• Have excellent logical, analytical & debugging skills Possesses high working qualities with good interpersonal skills, highly motivated, fast learner, good team player and very proactive in problem solving with providing best solutions.
• Provided 24/7 on-call support for production, strong team player, good analytical skills.

TECHNICAL SKILLS:

Splunk Modules: Splunk 5.x/6x/7x/8x, Splunk DB Connect, Splunk Enterprise, Splunk on Splunk, Splunk App for VMware, Splunk Web Framework.

Operating Systems: Solaris (8, 9 10), Red Hat Linux (4, 5), Unix, AIX, Windows 2K/XP/2003.

Web Servers: Oracle Http Server, Apache Tomcat, Sun ONE 6.x, MS IIS server 5.1/6.0, IBM-HTTP.

Application Servers: Oracle Web Logic Server 8.x./9.x/10.x, Apache Tomcat, JBoss 5.x/6.x, Oracle SOA Suite 11g, Oracle.

Tools used: Splunk 5x/6x/7x Is 5.1 .5.3 6.1.3, 6.2.3, 6.3. Oracle Forms 10g, 9i, 6i. TOAD 10.6. MySQL workbench

Databases: Oracle 11g/10g, MYSQL SERVER, DB2, MS Access.

Languages: SQL and PL/SQL. Perl, Python, Shell

Networking & Protocols: TCP/IP, Telnet, HTTP, HTTPS, FTP, SNMP, LDAP, DNS, DHCP.

PROFESSIONAL SUMMARY:

Confidential, Virginia Beach, Virginia

Splunk Developer/ Admin

Responsibilities:

• Integrated multiple data sources/feeds from networks to near real-time dashboards for trouble shooting network issues such as packet loss, latency, sequence gaps, secondary network down, etc.
• Hands on development experience in customizing Splunk dashboards, observability, visualizations, configurations, reports and search capabilities using customized Splunk queries
• Knowledge of splunk internals, indexer strategies, splunk parsing, indexing, performance optimization, managing noledge object, and maintaining noledge objects including lookups, modular inputs, performance enhancements when indexing and searching.
• Wrapper developed in Python for instantiating multi-threaded application and running with other applications
• Knowledge about Splunk architecture and various components (indexer, forwarder, search head, deployment server), Universal and Heavy forwarder
• Field Extraction, Using IFX, Rex Command and Regex in configuration files.
• Developed specific content necessary to implement Security Use Cases and transform into correlation queries, templates, reports, rules, alerts.
• Parsers written inPythonfor extracting useful data from teh design data base
• Development of Python APIs to dump teh array structures in teh Processor at teh failure point for debugging
• Worked on Security solutions (SIEM) dat enable organizations to detect, respond and prevent these threats by providing valuable context and visual insights to halp you make faster and smarter security decisions
• SSO Integration for user authentication and Single Sign-on in Splunk Web.
• Development of data structures, xml parsing using Python.
• Splunk SPL (Search Processing Language) and Dashboarding/Visualization. Setup dashboards for network device logs.
• Perl Scripts for bucketing teh failures
• Configuring props.conf file to push teh Bundles on teh Cluster Master in order to get teh Events breaking down in teh logs.
• Using inputs.conf to monitor files and directories with Splunk. Inputs.conf provides teh most configuration options for setting up a file monitor input by using RHEL 6.
• Team player in Proof-of-Concepts (POC) on Splunk implementation mentored and guided other team members on Understanding teh use case of Splunk.
• Hands on experience in on-boarding data of Stake holder into splunk and explaining teh Line of business concepts
• Created Dashboards for various types of business users in organization and worked on creating different Splunk Knowledge objects like Macros, IFX, Calculated fields, Tags, Event Types and Look ups
• Involved in Installation, Administration and Configuration of Splunk Enterprise and integration with local legacy systems
• Experience in Python general scripting, Hands on Experience in secure coding.
• Time chart attributes such as Span, Bins, Tag, Event types, Creating Dashboards, Reports using XML.
• Various types of charts Alert settings Knowledge of app creation, user and role access permissions. Creating and managing app, Create user, role, Permissions to noledge objects
• Monitored Database Connection Health by using SplunkDBconnects health dashboards.

Environment: Splunk 8.x,7.x,6.x, MySQL workbench, Splunk DB Connect and other modules, LINUX

Confidential, San Antonio, TX

Splunk Developer / Admin

Responsibilities:

• Installed, configured and administered Splunk Enterprise Server and Splunk Forwarder on Red Hat Linux and Windows servers.
• Setup Splunk Forwarders for new application tiers introduced into teh environment and existing applications.
• Data collection from various systems/servers, Forwarder Management, creating and managing Splunk apps.
• Building Splunk queries by Splunk Search Processing Language (SPL) and Regular expressions.
• Creating, maintain, support, repair, customizing System & Splunk applications, search queries and dashboards.
• Created and configured KPI’s in Splunk IT Service Intelligence.
• Splunk ITSI to determine Teh KPI for teh business.
• Experience creating and maintaining Splunk reports, observability, dashboards, forms, visualizations, alerts.
• Developed specific content necessary to implement Security Use Cases and transform into correlation queries, templates, reports, rules, alerts, dashboards, and workflow
• Strong noledge of Windows, Linux, and UNIX operating systems.
• Splunk SPL (Search Processing Language) and Dash boarding/Visualization. Setup dashboards for network device logs.
• Splunk Administration and analytics development on Information Security, Infrastructure and network, data security, Splunk Enterprise Security app, Triage events, Incident Analysis.
• Developed Splunk Objects and reports on Security baseline violations, Non-authenticated connections, Brute force attacks and many use cases.
• Experience on Splunk Enterprise Deployments and enabled continuous integration on as part of configuration (props.conf, Transforms.conf, Output.confg) management.
• Knowledge in general security concepts (authentication, authorization, encryption, digital signatures, etc), PKI concepts and SSL.
• Configuration of inputs.conf and outputs.conf to pull teh XML based events to splunk cloud indexer.
• Various types of charts alert settings Knowledge of app creation, user and role access permissions.
• Interact with teh data warehousing team regarding extracting teh data and suggest teh standard data format such dat Splunk will identify most of teh fields.
• Onboard new log sources with log analysis and parsing to enable SIEM correlation. Analyzed large datasets to identify metrics, drivers, performance gaps and opportunities for improvement
• Worked on setting up Splunk to capture and analyze data from various layers Load Balancers, Webservers and application servers.
• Splunk DB Connect 2.0 in search head cluster environments of Oracle, MySQL
• Designed and implemented a NoSQL based database and associated RESTful web service dat persists high-volume user profile data for vertical teams.
• Scripted SQL Queries in accordance with teh Splunk.
• Created many of teh proof-of-concept dashboards for IT operations, and service owners which are used to monitor application and server health.
• Created Dashboards, report, scheduled searches and alerts.
• Create dashboard from search, scheduled searches and Inline search vs scheduled search in a dashboard.
• Splunk administering in environments like Window Servers, Red Hat Linux Enterprise Servers.
• Install, configure, and troubleshoot Splunk. Experience with regular expressions and using regular expressions for data retrieval. Work with application owners to create or update monitoring for applications.
• Performed searching and reporting modules (Splunk ITSI and Enterprise Security App).
• Configurations with deployment server, indexers, search heads, server class. conf, server.conf, apps. conf, props.conf, transform. Conf, forwarder management configurations.
• AWS-hosted machine data analytics service, delivering real-time insights from logs, metrics and event data across teh entire application lifecycle and stack
• Good experience in clustering, deploying apps through Splunk deployment server, deployer, Splunk version upgradation, creating roles and authentication.

Environment: Splunk 6.x, Splunk DB Connect 2.4.0Splunk DB Connect and other modules, LINUX

Confidential, Houston, Texas

Splunk Developer/ Admin

Responsibilities:

• Installation and configuration of Splunk product at different environments.
• Configured Splunk Searching and Reporting modules, Knowledge Objects, Administration, Add-On’s, Dashboards, Clustering and Forwarder Management.
• Designing and maintaining production-quality Splunk dashboards.
• Splunk Enterprise Deployments and enabled continuous integration on as part of configuration management.
• Helping application teams in on-boarding Splunk and creating dashboards/alerts/reports etc.
• Most of teh time worked to install universal forwarders to but we have heavy forwarders set up to see data from sys log server side.
• Worked on installing Universal Forwarders and Heavy Forwarders to bring any kind of data fields in to Splunk.
• Created Reports, Alerts and Dashboards by Splunk query language. Experienced in creating and running Cron Jobs for scheduled tasks.
• Creating and Managing Apps, Create user, role and Permissions to Knowledge objects.
• Involved in standardizing Splunk forwarder deployment, configuration and maintenance across UNIX and Windows platforms.
• Splunk DB Connect 2.0 in search head cluster environments of Oracle, MySQL.
• Troubleshooting of searches for performance issues by adding lookups, correct joins and using summary indexes
• Managing indexes and cluster indexes, Splunk web framework, data model and pivot tables.
• Performed troubleshooting and/or configuration changes to resolve Splunk integration issues.
• Hands on development experience in customizing Splunk dashboards, visualizations, configurations, reports and search capabilities using customized Splunk queries.
• Playing a key role in identifying and driving process changes within teh team.

Environment: Splunk, Splunk DB Connect and other modules, Oracle 9i/10g, Solaris 10, LINUX,Sun One Web Server 6.0, Apache 2.x

Confidential

PL/SQL Developer

Responsibilities:

• Developed Stored Procedures, Functions, Packages and SQL Scripts using PL/SQl.
• Loaded teh data into database tables using SQL loader from text and excel file.
• Developed data model, SQL Queries, SQL Query tuning process and Schemas.
• Worked with bulk collect to implement teh performance of multi row queries.
• Data loaded from legacy systems using PL/SQL and SQL Loader.
• Developed Shell scripts to automate execution of SQL scripts to check incoming data with master tables, insert teh valid data into Customer Management System and invalid data into error tables which will be sent back to sender notifying teh errors.
• Involved in logical modeling and physical modeling of application.
• Wrote various kinds of SQL queries involving correlated Sub queries, UNION, Inner and Outer Joins.
• Developed Procedures for efficient error handling process by capturing errors into user managed tables.
• Generated various analytical reports using Microsoft Access.
• Worked with java developers to repair and enhance current base of PL/SQL packages to fix production issues and build new functionality and improve processing time through code optimizations and indexes.
• Created partitioned tables, partitioned indexes for manageability and scalability.
• Used Toad for creating PL/SQL (trigger, sequence, stored procedure).

Environment: Oracle 10g/9i, SQL, PL/SQL, SQL Loader, MS Access, UNIX Shell script, TOAD, Oracle Forms 10g, Reports10g, UNIX, Windows XP/2000.owb 10g.