Fernadez M — Splunk Consultant & Architect

Designed multi-site Splunk clustering + SHC, 8TB/day ingest, 99.95% SLA.

• Design and implement Splunk clustered environment
• Manage and upgrade all Splunk components.
• Build custom Splunk apps for specific internal use (proprietary)
• Manual/auto Splunk ingestion (ansible or webform base)
• Install and manage Splunk premium apps (ITSI)

Migrate indexes to Smart-Store

• Migrate Splunk Indexes to Smart-Store and optimized Smart-Store Caches (AWS S3 Buckets)
• Developed Splunk advance App/add-on with JavaScript, html, SPL and CSS
• Persist Splunk App data using KV-store and referencing lookups
• Secure Splunk App by adding Capabilities and roles
• Automate Splunk Upgrade with Ansible (From version 8.0.4 to 8.2.0)

Splunk admin and linux admin

• Developed custom Splunk apps/Addon to sync with Splunk KV-store. (Kafka monitoring
• Collaborate with Java developers to intergrade Splunk with Microservices (Splunk REST and JMS)
• Upgrade Splunk from version 7. xx to 8.0.5 and upgrade ITSI from version 3.xx to 4.7.1 with ansible
• Upgrade Linux servers from RHEL 7 to RHEL 8 and upgrade the kernel
• Automate Splunk ITSI entities and service update

Splunk admin and linux admin

• Manage and monitor Splunk Enterprise
• Ingest data from IOT devices
• Normalizing data through CIM compliance process
• Deployment of updates via deployment server
• Troubleshoot and analyze Splunk processes and logs