SUMMARY:

• 7+ years of experience in designing, developing and delivering automation projects using SPLUNK, ETL & SQL.
• Experience as Splunk Admin/Developer, performed activities including requirement analysis, design and implementations of various client server based applications using Splunk 5.x, Splunk 6.x.
• Expertise in customizing Splunk for Monitoring, Application Management and Security as per customer requirements and industry best practice.
• Expert in analyzing data, correlating trends, building reports and report writing.
• Expertise with the usage of various search commands like stats, chart, timechart, transaction, strptime, strftime, eval, where, xyseries, table etc.
• Experience in using Regular Expressions.
• Managed Indexer Clusters including security, hot and cold bucket management and retention policies.
• Used techniques to optimize searches for better performance, Search time vs Index time field extraction and understanding of configuration files, precedence and working props.conf, transforms.conf, inputs.conf, outputs.conf setting up a forwarder Monitor stanza in inputs.conf.
• Involved in helping the UNIX and Splunk administrators to deploy Splunk across the UNIX and windows environment.
• Expert in install, configure and administer splunk Enterprise Server and splunk Universal Forwarder splunk Heavy Forwarder in large distributed environment comprising Windows, Red hat Solaris, AIX with exposure various splunk Apps to monitor splunk deployments.
• Install and configure Splunk DB Connect and support of syslog - ng and rsyslog.
• Perform Enterprise Linux tasks as they pertain to supporting the Splunk application.
• Experience in Quality assurance,Test automation and Synthetic Monitoring.
• Experienced in all data processing phases, from the Enterprise Model, Data Model (Logical and Physical Model), and Data Warehousing (ETL).
• Experience in Big Data and familiar with components of Hadoop Ecosystem: HDFS, HAWQ, Hive, HBase, Pig.
• Normalization of fields and defining the event types used CIM (Common Information Model).
• Extensive experience in writing Packages, Stored Procedures, Functions and Database Triggers using PL / SQL and UNIX Shell scripts. Also handled Oracle utilities like SQL Loader, import etc.
• Extensive Data Warehouse experience using Informatica 7/8.x/9 Power Center tools (Source Analyzer, Mapping Designer, Mapplet Designer, Transformation Designer, Repository Manager, and Server Manager) as ETL tool on Oracle /DB2 Database.
• Worked with SIEM team monitoring notable events through Splunk ES.
• Experienced in Data Extraction, Transforming and Loading (ETL) between Homogenous and Heterogeneous Systems using SQL Server tools like SSIS, DTS, Bulk Insert, BCP and XML.
• Extensive experience in writing Packages, Stored Procedures, Functions and Database Triggers using PL/SQL and UNIX Shell scripts. Also handled Oracle utilities like SQL Loader, import etc.
• Working knowledge of data warehouse techniques and practices, experience including ETL processes, dimensional data modeling (Star Schema, Snow Flake Schema, FACT & Dimension.
• Tables), OLTP and OLAP.
• Strong experience using SQL, PL/SQL Procedures/Functions, Triggers and Packages.
• Very good understanding of software development life-cycle (SDLC) process, followed Agile Scrum.
• Experience in in SIEM, AND CIM,AND CLI commands.
• Worked closely with the architect and team in designing, developing and implementing the logical and physical model for the Data Mart.
• Experience in different team projects with good project implementation experience, team skills, troubleshooting, presentation abilities and issue resolution capabilities.

TECHNICAL SKILLS:

Splunk: Splunk 5.x/6.x, Splunk SPL, Splunk Enterprise Security

Languages: C, C++, Java (Core Java, Servlets, JSP, JDBC, Java Beans)

Web Server Tools: HTTP Server, Apache, TFS

Data Warehousing: Informatica Power Center 9.5/ 9.1/8.5/8.1.1/7.1.2, Informatica Designer, Workflow Manager, Work flow Monitor, DataMart, Mapplet, Transformations, Autosys, SQL*Plus

Databases: Oracle, SQL Server, DB2, Sybase, Access

Testing Software: QTP (UFT), HP Quality Center (QC/ALM), Selenium

Web Technologies: HTML, JavaScript, CSS

Scripting Languages: Unix Shell Script, python, Visual Basic, XML, PERL

Data Modeling: Logical/Physical/Dimensional, Star/Snow flake Schema, OLAP, Agile/Waterfall (SDLC)

Tools: & Protocols

Putty, SSH, Telnet, TCP/IP, UDP, POP, SMTP, HTTP/HTTPS, LDAP.

Security: SSL, TLS, IDS, IPS

RDBMS: SQL, PL/SQL, Db2, Oracle 9i/10g,11g

Operating Systems: Red Hat Linux, Centos, Ubuntu, Solaris, Windows, MAC OS X.

Hadoop/Big Data: HDFS, Map reduce, Base, Pig, Hive, Sqoop, Flume, Mongo DB, Cassandra, Power pivot, Puppet, Oozie, and Zookeeper.

ETL Tools: Informatica, Talend

PROFESSIONAL EXPERIENCE:

Senior Splunk Consultant

Confidential, Portland, OR

Responsibilities:

• Expertise in Actuate Reporting, development, deployment, management and performance tuning of Actuate reports.
• Provide regular support guidance to Splunk project teams on complex solution and issue resolution. Created Dashboards, report, scheduled searches and alerts.
• Knowledge about Splunk architecture and various components (indexer, forwarder, search head, deployment server), Heavy and Universal forwarder, License model.
• Integrated Service Now with Splunk to generate the Incidents from Splunk.
• Worked on DB Connect configuration for Oracle, My SQL and MSSQL.
• Created many of the proof-of-concept dashboards for IT operations, and service owners which are used to monitor application and server health.
• Created HTML dashboards with java scripts and CSS to create customized visualizations.
• Installed and configured DB Connect plug in to get the data from Oracle, MySQL and MSSQL.
• Field Extraction, Using Ifx, Rex Command and Regex in configuration files.
• Various types of charts Alert settings Knowledge of app creation, user and role access permissions. Creating and managing app, Create user, role, Permissions to knowledge objects.
• Parsing, Indexing, Searching concepts Hot, Warm, Cold, Frozen bucketing.
• Configure Clustering EJB objects, JDBC connections and JMS connection factories.
• Involved in standardizing Splunk forwarder deployment, configuration and maintenance across UNIX and Windows platforms.
• Worked on setting up Splunk to capture, analyze data in Bank of America online Banking.
• Set up Splunk to capture and analyze data from various layers Load Balancers, Web servers and application servers.
• Captured data from various front end, middle ware application.
• Dashboards were created to monitor the traffic volume across, response times, Errors, Warnings across.
• Maintain, grow and improve the TVX Splunk environment.
• Use techniques to optimize searches for better performance, Search time vs Index time field extraction. And understanding of configuration files, precedence and working.
• Create dashboard from search, Scheduled searches o Inline search vs scheduled search in a dashboard.
• Expertise in using Amazon AWS API tools like: Linux Command line, puppet integrated AWS API tools.
• Expertise with SIEM.
• Prepared, arranged and tested Splunk search strings and operational strings.
• Developed, evaluated and documented specific metrics for management purpose.
• Using SPL created Visualizations to get the value out of data.
• Monitor for fraud patterns in claims by correlating with past profiles, internal and external fraud knowledgebase.
• Involved in assisting offshore members to understand the use case of business.
• Assisted internal users of Splunk in designing and maintaining production-quality dashboard.
• Installed, configured and managed Decameter users on the Hadoop cluster.
• Involved in writing complex IFX, rex and Multikv command to extracts the fields from the log files. Worked on DB Connect configuration for Oracle, My SQL and MSSQL.
• Developing custom web application solutions for internal ticket metrics reporting.
• Experience in implementation of log management, analysis solutions.

Environment: Splunk 6.0, pivotal HD, Splunk Enterprise security, windows, Splunk knowledge objects, Python, Rest APIS, SDKS, SIEM, AWS

Senior Splunk Developer/ Administrator

Confidential, Atlanta, GA

Responsibilities:

• Provide regular support guidance to Splunk project teams on complex solution and issue resolution.
• Involved as a Splunk Admin in capturing, analysing and monitoring front end and middle ware applications.
• As part of SIEM, monitored notable events through Splunk Enterprise Security (Using V3.0).
• Expertise with Splunk UI/GUI development and operations roles.
• Integrated real-time data between Splunk Enterprise and databases by using DB connect app. Thus configured DB Connect for MySQL.
• Created many of the proof-of- concept dashboards for IT operations, and service owners which are used to monitor application and server health.
• Helped team on-board data, create various knowledge objects, install and maintain the Splunk Apps, TAs and good knowledge on JavaScript for advance UI as well Python for advance backend integrations.
• Generated Shell Scripts to install Splunk Forwarders on all servers and configure with common Configuration Files such as Bootstrap scripts, Outputs.conf and Inputs.conf files.
• On-board new log sources with log analysis and parsing to enable SIEM correlation.
• Configuration of Inputs.conf and outputs. conf to pull the XML based events to splunk cloud indexer.
• Parsing, Indexing, searching concepts Hot, Warm, Cold, frozen bucketing and splunk clustering.
• Setup and configuration of search head cluster with three search head nodes and managing the search head cluster with deployer.
• Involved in standardizing Splunk forwarder deployment, configuration and maintenance across Linux and Windows platforms.
• Worked on setting up Splunk to capture and analyse data from various layers, Load Balancers, Webservers and application servers.
• Very good understanding of software development life-cycle (SDLC) process, Followed Agile scrum and story maps for dev tracking.
• Supporting and monitoring splunk cluster infra structure in AWS cloud environment.
• Scripted SQL Queries in accordance with the Splunk.
• Created many of the proof-of-concept dashboards for IT operations, and service owners which are used to monitor application and server health.
• Various types of charts alert settings Knowledge of app creation, user and role access permissions.
• Creating and managing app, create user, role, permissions to knowledge objects.
• Knowledge about Splunk architecture and various components (indexer, forwarder, search head, deployment server), Heavy and Universal forwarder, License model.
• Created Dashboards, Data models, report, scheduled searches and alerts.
• Field Extraction, Using IFX, Rex, Sed Command and Regex in configuration files.
• Automated reports and alerts to monitor the applications, tools and services proactively.
• Configuring and set up different hosts boxes on Ops view and site scope with hashtags.
• Proactively monitoring and trouble shoot the different hosts boxes on Ops view.

Environment: SPLUNK 6.2, 6.3.5, Linux, Site scope, Ops View, Service now, Linux and UNIX Servers, SQL Server 2008

Splunk Developer

Confidential, San Rafeal, CA

Responsibilities:

• Having experience in understanding of Splunk 5.x and 6.x product, Distributed Splunk architecture and components including search heads, indexers, forwarders, etc.
• Created Quality-Report, custom Dashboards, report, scheduled searches and triggered alerts.
• Resolved configuration based issues in coordination with infrastructure support teams.
• Experience in Extraction on Search time vs Index time field extraction.
• Performed network vulnerability security scans to identify cyber vulnerabilities.
• Good Understanding of configuration files, precedence and daily work exposure to props.conf, transforms.conf, inputs.conf, outputs.conf and Setting up a forwarder information based on requirement.
• Maintenance of Splunk Environment with multiple Indexers.
• Manage and configure index settings and created event type definitions. Analyzed security based events, risks and reporting instances.
• Set up Splunk to capture and analyze data from various layers Load Balancers, Web servers and application servers.
• Developing custom web application solutions for internal ticket metrics reporting.
• Set indexing property configurations, including time zone offset, custom source type rules.
• Configure regex transformations to perform on data inputs. Use in tandem with props.conf.
• Designed core scripts to automate Splunk maintenance and alerting tasks.
• Worked on DB Connect configuration for Oracle, My SQL and MSSQL.
• Used kill chain analysis to trace the different stages of an advanced threat, link the sequence of events and enable targeted remediation.
• Configure SIEM tool performance.
• Install and maintain the Splunk add-on including the DB Connect 1, Active Directory LDAP for work with directory and SQL database.
• Knowledge about Splunk architecture and various components (indexer, forwarder, search head, deployment server), Heavy and Universal forwarder, License model.
• Configure SIEM tool performance and event data.
• Expertise in Actuate Reporting, development, deployment, management and performance tuning of Actuate reports.
• Various types of charts Alert settings Knowledge of app creation, user and role access permissions. Creating and managing app, Create user, role, Permissions to knowledge objects.
• Interact with the data warehousing team regarding extracting the data and suggest the standard data format such that Splunk will identify most of the fields.

Environment: Splunk Enterprise Server 5.x.x/6.x, Windows Server 2012/2008/2003 R2, Linux and UNIX Servers Splunk, SQL Server 2008, SAN, WLAN, Service Now, Tivoli.

PL/SQL Developer

Confidential, Thousand oaks, CA

Responsibilities:

• Import & Export of data from one server to other servers using tools like Data Transformation Services (DTS) and bulk copy. Periodic monitoring of the system for bottlenecks.
• Requirement gathering - Solution design.
• Involved in the migration from SQL server .
• Actively involved in Normalization of database.
• Designed DDL and DML for MS SQL Server 2008.
• Create rules, defaults, tables, views, clustered & non-clustered index, user defined data types, and user defined functions.
• Created Triggers to enforce data and referential integrity.
• Actively designed the database to fasten certain daily jobs, stored procedures.
• Developed SQL and PL/SQL scripts to transfer tables across the schemas and databases.
• Performed SQL and PL/SQL Performance tuning and Application Tuning using various tools like TKPROF, AUTOTRACE and DBMS SQLTUNE.
• Data loaded from legacy systems (ETL Operations) using PL/SQL and SQL*Loader.
• Developed Procedures for efficient Error Handling process by capturing errors into user managed tables.
• Developed UNIX Shell scripts to automate table creation, execute procedures.
• Optimize query performance by creating indexes.
• Involved in writing SQL batch scripts.
• Write T-SQL statements for retrieval of data and Involved in performance tuning of T-SQL Queries and Stored Procedures.
• Involved in merging existing databases and designed new data models to meet the requirements.
• Perform daily database backup & restoration and monitor the performance of Database Server.
• Use DDL and DML for writing triggers, stored procedures, and data manipulation.
• Installed and Configured SQL Server 2005 on development server for designing and testing.
• Worked on client requirement and wrote Complex SQL Queries to generate Crystal Reports.

Environment: MS SQL Server 2008, Windows platform, Visual Basic 6.0, Crystal Reports, ETL, UNIX, MS Windows XP/2000, Oracle Development Suite.

PL/SQL Developer

Confidential

Responsibilities:

• Involved in the design, coding, deployment and maintenance of the project.
• Acted as a single point contact for the Database related activities like developing/ creating tables, procedures and functions for the java developers. Involved in designing of the application using UML (Unified Modeling Language).
• Written PLSQL procedures to extract the daily promoted and demoted Employees from the HR database.
• Developed various reports by using SQL.
• Loading of data (Data Migration) from legacy system to custom tables using SQL LOADER.
• Supporting on-call in out of office hours.
• Developed stored procedures and triggers to facilitate consistent data entry into the database.
• Written Stored Procedures using PL/SQL and functions and procedure for common utilities.
• Participated in system analysis and data modeling, which included creating tables, views, indexes, synonyms, triggers, functions, procedures, cursors and packages. Created programming code using advanced concepts of Records, Collections and Dynamic SQL.
• Used advanced Bulk technologies (FOR ALL, BULK COLLECT) to improve performance. Developed installation scripts for all the deliverables. Performed functional testing for different Oracle Forms application functionalities.
• Performed unit testing, system testing and integration testing.
• Worked on Oracle database to design Database schema, created Database structure, Tables and Relationship diagrams.
• Supported on call 24x7 schedule for Production Support.

Environment: Oracle 11g, SQL, PL/SQL, Proc *C, Java Script, UNIX

Oracle Developer

Confidential

Responsibilities:

• Collaborated with the Business analysts and the DBA for requirements gathering, business analysis, testing and project coordination.
• Worked with Agile/Scrum team to deliver software projects and products.
• Developed SQL and PL/SQL scripts to transfer tables across the schemas and databases.
• Helped in maintaining the databases and also worked with production support team to solve tickets and debugging issues. Developed SQL scripts, packages and procedures for Business rules check to implement business rules.
• Generated various analytical reports using Microsoft Access.
• Migrated XML data to Targeted files using ETL tools in Data warehousing.
• Developed Procedures for efficient error handling process by capturing errors into user managed tables.
• Developed Shell scripts to automate execution of SQL scripts to check incoming data with master tables, insert the valid data into Customer Management System and invalid data into error tables which will be sent back to sender notifying the errors.
• Worked with java developers to repair and enhance current base of PL/SQL packages to fix production issues and build new functionality and improve processing time through code optimizations and indexes.
• Developed UNIX Shell scripts to automate table creation, execute procedures.
• Used Toad for creating PL/SQL (trigger, sequence, stored procedure).
• Setup Database Mail Profile in SQL Server Management Studio for operations team to get updates on specific tables once updated.
• Developed PL/SQL triggers on master tables for automatic creation of primary key values.
• Created scripts for new tables, views, queries for new enhancements in the application using TOAD/SQL developer.

Environment: Oracle 10g/9i, SQL, PL/SQL, SQL*Loader, MS Access, UNIX Shell script, TOAD, UNIX, Windows XP/2000