- Develop and deliver Splunk training programs for diverse audiences.- Simplify complex topics into actionable learning modules.- Stay updated with Splunk features and incorporate them into training.- Configure Splunk forwarders, indexers, and ingestion pipelines for diverse datasets.- Validate data quality and optimize Splunk ingestion to reduce system overhead.- Work closely with cross-functional teams to integrate Splunk with existing tools.- Document configurations, workflows, and best practices for knowledge sharing.- Create playbooks and guides for operational and training purposes.

- Orchestrated the distributed clustered environment with 3 node Indexer cluster with 1 Cluster Manager, 3 node Search Head cluster with 1 Deployer, 1 Deployment Server, 3 Heavy Forwarders, 23+ Universal Forwarders, 1 License Manager, 1 Monitoring console.- Maintained the distributed environment with 1 Search head, 2 Indexers, 1 Deployment Server, 2 Heavy Forwarders, 15+ Universal Forwarders, 1 License Manager, 1 Monitoring console.- Responsible for Deployment process for 20+ Apps to Search Head cluster, Indexer cluster, and Forwarders using Deployment Server- Onboarded data from Standard applications (ServiceNow, GitLab, GitHub, Jenkins) data to Splunk Enterprise using Splunk Apps/Add-ons from Splunk.- Implemented Jenkins pipelines to automatically deploy Splunk apps by fetching configurations from GitHub.- Responsible for representing the whole Splunk team on the Monthly Catchup with Senior leadership (Release & Epic status reporting)- Worked on Upgrading Splunk Instances from 8.2.0 to 8.2.4 and then from 8.2.4 to 8.2.5. (Both clustered and non-clustered components) in Windows and Linux OS- Splunk Data Onboarding MVP - Created Index-time field extraction configuration to push the data into different indexes based on the sources (Sources are dynamic, but have a common pattern. Using props.conf & transforms.conf in Splunk)- Managed the configurations for 26 Applications onboarding process, which included DB Servers, Apache servers, API Gateways, and custom applications.- Created AWS instances Dashboard in Splunk using AWS SDK for Python.

- Soft Mania Core Team Member- Timestamp Extraction Masterclass - Trainer - Live sessions every month- SPL Commands Masterclass - Creator & Trainer- Splunk Developer Roadmap (Real Time) - Creator & Trainer- Splunk Data Onboarding Roadmap (Real Time) - Creator & Co-Trainer- 1 to 1 trainings - Co-Trainer- Scrum Master for Soft Mania Core Team- Soft Mania for Women -Working on creating a learning community for Women

- Created a Landing page with 17 Metrics (Single value, pie chart, area chart, gauge charts) for the Windows Security Logs Monitoring using Splunk Dashboard Studio. ~20,000 Windows servers. (Reporting time reduced by ~60%)- Worked on Packaging Splunk Apps as per best Practices by Splunk & Getting them vetted for Splunk Cloud Migration.- Splunk (Version 8) Upgrade - Updating Splunk Apps code to make it compatible with Splunk's latest versions. Troubleshooting the issues during deployments/Releases- Masked the sensitive data using REGEX during index time using props & transforms.conf files.- Onboarded different timezone data & configured 14 different time zone configurations using “TZ” & “TZ_ALIAS” properties.- Implemented Persistent queues as a backup for the network outages between Universal Forwarders & Indexer Cluster.

• Integrated 240+ Windows servers & 1000+ Linux servers using Universal Forwarder for Infrastructure monitoring use case - Reduced the Cloud billing by 47%.• Configured Event-based filtering on Windows event logs, and reduced ~30% of the license usage.• Monitored 200+ GitHub repositories, to provide an overview of the Commit details, Pull Requests, Release Patterns.• Configured Jenkins Pipelines to send logs to Indexer using HTTP Event Collector.• Configured Syslog to forward data to the common repository & then monitored those directories to index the log files, and performed file path-based host name extractions.• Integrated ServiceNow with Splunk to facilitate incident Management via Splunk Alerts/Dashboard interactions.• Converted 50+ Standalone Splunk Applications provided by the Development team into Distributed Splunk Applications.• Implemented regex-based file filtering on the Universal forwarder configurations, to filter the unwanted log files being indexed, which saved ~40% of License usage.• I was supporting the development team to re-index the data for 250+ custom indexes in the DEV environment.• Responsible for maintaining retention policies for 540+ indexes.• Maintained the Confluence page by documenting the sourcetype details along with the field names & their meanings