Splunk

Squad Haystack ensures reliable operation of Splunk Enterprise enabling the organization to gather analyze and visualize data from applications infrastructure cloud services databases etc to support monitoring troubleshooting and data driven decision making

The technical skills required include:
Splunk Administration & development
Proficiency with SPL queries
Splunk Upgrade and maintenance
Familiarity with Splunk REST APIs
Working knowledge of basic Linux/Unix command-line operations
Azure DevOps CI/CD pipeline configuration
Cloud Networking (Networking services)
Infrastructure-as-Code (Terraform Kubernetes)
Configuration-as-Code (Ansible playbooks CI/CD pipelines)
Git version control
Python Bash scripting and power automate for automation
security operations( vulnerability & patch management)


Splunk:
- Expertise in Splunk administration for hybrid and clustered environments
- Instrument advanced data ingestion using HEC add-ons containers and cloud
- Experience in developing Splunk Dashboards Alerts & Reports
- collaborate with customers and understand the requirements and ensure appropriate solution is delivered
- Troubleshooting and debugging the environment
- Proactive monitoring and continuous service improvements
- Perform Splunk upgrades and ensure environment stability

CI/CD & DevOps:
- Azure DevOps pipelines (YAML classic)
- Pipeline tasks variables templates and stages
- Build & release pipelines

Infrastructure-as-Code :
- Managing cloud resources via code
- Terraform to spin up the VMs in cloud environments
- Kubernetes to containerize Splunk components and deploy using helm charts and ArgoCD
- Azure portal and CLI usage
- AWS console and CLI usage
- Managing cloud resources via code

Configuration-as-code:
- ansible playbooks azure repos and pipelines to deploy the configurations to Splunk cluster
- Run playbooks via Ansible Automation Platform job templates

Cloud Networking:
- private endpoints(Azure/AWS)
- Security groups


Scripting & Automation:
- Bash scripting for processing the operational requests
- Python for automating the operational requests using AZDO pipelines
- experience in developing/managing the power automate flows

Security operations:
- Identify vulnerabilities and assess the severity
- Remediate via patches config fixes or compensating controls
- apply & validate OS and application patches

Version Control
- Git branching merging pull requests
- Repository management and code reviews

Documentation & Collaboration
- Markdown README
- Technical documentation best practices