Independent Consultant
Information Technology/IT
Worldwide
English
I am an experienced Splunk architect/ admin having worked in complex environments to include multi-site index clusters and multi-tenancy.
Installation and configuration of the Splunk Compliance Analytics App. This included installation of the TA, configuring of datamodels, configuration of dashboard within the TA, onboarding of relevant logs to satisfy FISMA requirements, and understanding of NIST SP 800-171 Controls.
Supported Splunk configuration, administration, and architecture of Splunk
Experience troubleshooting of conf files including props, transforms, inputs, etc.
Developed search time field extractions for difference data sources
Application and technical add-on installation and configuration (Splunk Compliance App, CIM, etc)
Conducts dashboard development and data enrichment
Experience on boarding new data sources
Understanding of complex environments including multiple search head clusters and index clusters
Developed correlation searches and implemented new analytics using Splunk Enterprise Security
Wrote alerting and reporting logic using Splunk Enterprise for end users using SPL
Developed a framework for documenting and generating analytics to be used by SOC analysts
Networking Fundamentals