Vinod Bhola

5 Years 9 months of experience in the IT industry as Software Engineer and Technical Project Lead. Highly Skilled in deploying, integrating Splunk Infra with various solutions. Well versed with implementing, maintaining Splunk premium apps- Splunk Enterprise Security and Splunk ITSI

• Upgraded Splunk Multisite clustered Environment having 32 indexers, 9 search heads and 2 Deployers , 5 deployment servers, 4 heavy forwarders and 1 cluster master.
• Expanded the Splunk multisite environment with additional indexers and search heads.
• Rebalanced data across the indexers.
• Upgraded Splunk Enterprise Security app and various apps and addons.
• Used CIM to Normalize data. Mapped logs to the respective data model.
• Installed, Configured, Maintained, Tuned and Supported Splunk Enterprise server 8.x.
• Installed and implemented Splunk Enterprise Security.
• Created custom dashboards with drill downs in ES glass tables
• Guided team for troubleshooting and documentation of  Splunk Universal forwarder installation with best practices.
• Created and developed custom Addon by using Splunk Add-on builder for data collection through APIs.
• Implemented Splunk multi site clustered environment with 150 indexers, 5 heavy forwarders, 2 deployers for respective search head clusters and 5 deployment servers for 12TB data ingestion with Splunk Enterprise Security.
• Documented Disaster Recovery failover testing approach.
• Involved in standardizing Splunk forwarder deployment, configuration and maintenance across UNIX and Windows platforms.
• Successfully prioritized the tasks and helped manage the timeline of projects.
• Escalated various issues with the stakeholders in order to meet the timeline.
• Transferred KT and assigned tasks to the respective team members for carrying out the integration of solutions with SIEM.
• Supported Operations team for maintenance of the platform, SOC team for building use cases and coordinating with customer’s team for gathering required information to carry out the integration.
• Worked on automating the restoration of the archived/frozen buckets.
• Optimized Splunk’s license usage against the license violation.
• Experienced in using Splunk- DB connect for real-time data integration between Splunk Enterprise and rest all other databases.
• Worked on automating on installation of 5000+ splunk universal forwarder.
• Raised and escalated various ongoing technical challenges/issues  with the splunk OEM for better resolution.
• Supported SOC team for implementing the suggested technical solutions by Splunk OEM  .
• Strategize data onboarding for cybersecurity drills in minimal time.
• Troubleshoot in setting up and configuring DB-connect addon.
• Worked on mitigating the Splunk Security vulnerabilities. 

Worked on sharing the audit reports as per the requirement

Completed B.Sc in Statistics.