Veerendra Donekal

Experienced Splunk Developer and Administrator with 3 years of hands-on expertise in distributed Splunk environments, search optimization, dashboard development, and SIEM operations. Skilled in deploying Splunk Enterprise components, onboarding data sources, tuning alerts, managing clusters, and performing security log analysis. Strong background supporting SOC operations, reducing false positives, automating reporting, and training new team members.

Senior Associate at Amazon (2025-04 – Present)

• Installed and maintained Splunk Enterprise components including UF/HF, Indexers, Search Heads, and Cluster Master.
• Set up and managed indexer and search head clustering, handled replication, failover, and scaling.
• Configured ingestion pipelines using props.conf, transforms.conf, inputs.conf, outputs.conf for parsing & routing.
• Performed end-to-end data onboarding from Windows/Linux, firewall, proxy, IAM, network, API, and application logs.
• Managed license usage, identified ingestion spikes, and optimized index volume and retention.
• Conducted Splunk upgrades, app deployment, DR testing, and controlled configurations using Deployment Server.
• Troubleshot ingestion failures, parsing errors, queue backlogs, and forwarder heartbeat issues.
• Built and optimized SPL queries, dashboards with drill-down, and stakeholder KPI reports.
• Designed and managed knowledge objects including scheduled searches, workflows, macros, tags and event types.
• Implemented summary indexing, accelerated data models, and search optimization practices.
• Created alerting strategies, suppression rules, and custom notifications to reduce false-positive rates.
• Developed automated reporting packs for weekly, monthly, and audit requirement tracking.
• Integrated Splunk with SIEM workflows and external tools to support threat monitoring.
• Coordinated with SOC analysts and platform teams for detection tuning and coverage improvements.
• Performed environment health audits, index consistency validation, and service availability checks.
• Authored SOPs and training material; mentored new team members on platform administration and SPL.

Process Associate at Genpact (2023-02 – 2025-03)

• Performed daily Splunk platform monitoring including indexing, forwarder connectivity and license utilization.
• Installed and managed Universal Forwarders, created ingestion apps and validated sourcetypes.
• Monitored Splunk health, data ingestion volumes, system resources, and job loads.
• Built lookup-driven dashboards and managed alerting logic across operational and security log sources.
• Developed dashboards and alert rules for SOC, network, and endpoint monitoring.
• Tuned noisy alerts, removed stale detections, and implemented suppression based on real-time analytics.
• Onboarded data sources from endpoints, firewalls, VPN, AD, and cloud/SaaS systems.
• Prepared operational and leadership reporting including shift-based summaries and monthly metrics.

B.Sc in Computer Science – VDA Degree College, Visakhapatnam (2021)