Mostafa

ABOUT ME

• Strong experience with Splunk 5.x and 6.x product, distributed Splunk architecture and components including search heads, indexes and forwarders.
• Experience in Operational Intelligence using Splunk.
• Headed Proof-of-Concepts (POC) on Splunk ES implementation, mentored and guided other team members on Understanding the use case of Splunk.
• Expertise in customizing Splunk for Monitoring, Application Management and Security as per customer requirements and industry best practice.
• Expertise in Installation, Configuration, Migration, Troubleshooting and Maintenance of Splunk, Passionate about Machine data and operational Intelligence.
• Implemented workflow actions to drive troubleshooting across multiple event types in Splunk.
• Expert in installing and configuring Splunk forwarders on Linux, Unix and Windows.
• Expert in installing and using Splunk apps for UNIX and Linux (Splunk nix)
• Used Splunk Hunk for splunk analytics with Hadoop.
• Exposed the metadata to the end users using the Splunk Analytics for Hadoop.
• Knowledge on configuration files in Splunk (Pros.conf, Transforms.conf, output.conf).
• Worked with SIEM team monitoring notable events through Splunk ES.
• Supports, Monitors and manages the SIEM environment.
• Expertise in Splunk SPL as well as python and several other languages.
• Scripting and development skills using Perl and Python with strong knowledge of regular expressions.
• Worked on Amazon AWS, configuring, launching Linux and windows server instances for Splunk deployment.
• Instrumental in developing and delivering training modules on Cloud Platform
• Expert in installing and using Splunk apps for UNIX and Linux (Splunk nix).
• Knowledge on Configuration files in Splunk (props.conf, Transforms.conf, Output.confg)
• Worked on large datasets to generate insights by using Splunk.
• Production error monitoring and root cause analysis using Splunk.
• Install, configure and administer Splunk Cloud Environment 6.5.0 and Splunk Forwarder 6.x.x on Windows Servers.
• Supported Splunk Cloud with 3 Indexers, 120 forwarders and Generated 300 Gb of data per day.
• Involved in standardizing SPLUNK forwarder deployment, configuration and maintenance across Windows Servers
• Configured inputs.conf and outputs.conf to pull the XML based events to SPLUNK Cloud Indexer.
• Debug Splunk related and integration issues.

SKILLS