Aug 2019 – May 2022 · 2 yrs 9 mos · Phoenix, Arizona, United States

• Installation of Splunk Enterprise, Splunk forwarder, Splunk Indexer, Apps in multiple servers (Windows and Linux) with automation.
• Install and maintain the Splunk adds-on including the DB Connect, Active Directory LDAP for work with directory and SQL database.
• Manage Splunk configuration files like inputs, props, transforms, and lookups including Knowledge Objects.
• Create Splunk Search Processing Language (SPL) queries, Reports, Alerts and Dashboards.
• Continuous monitoring of the alerts received through mails to check if all the application servers and web servers are up.
• Integrated Qualys with Splunk and used it to obtain information about affected web applications and prevalent vulnerabilities into the Splunk dashboard, and enables preconfigured searches and reports.
• Parsing, Indexing, Searching concepts Hot, Warm, Cold, Frozen bucketing.
• Field Extraction, Using Ifx, Rex Command and Regex in configuration files.
• Involved in admin activities and worked on inputs.conf, index.conf, props.conf and transform.conf to set up time zone and time stamp extractions, complex event transformations and whether any event breaking.
• Creating Reports, Pivots, alerts, advance Splunk search and Visualization in Splunk enterprise.

Jun 2017 – Jul 2019 · 2 yrs 1 mo

Aug 2014 – Dec 2015 · 1 yr 4 mos · Hyderabad, Telangana, India · On-site