Marcus P.

Experience

1. IT Cybersecurity Specialist

   Defense Information Systems Agency

   Oct 2021 — Present · Montgomery, AL, US

   Maintain the Splunk Console, ensuring it\'s up and running and for any reports of message errors. Initiate and execute searches for statistics of the number of servers connecting and reporting daily. Resolve ITSM trouble tickets. Create Splunk user account and verify customer access. Monitor NetIQ Ops Center for Splunkd on the Port to ensure all DISA Data Centers do have Splunk Application actively running. Work directly with Splunk Professional Services to enhance and resolves technical issues with the Splunk Applications.Provide software installation instructions and automate install options to System Administrators, confirms clients have proper connection and log monitoring strategy per guidance.Perform the installation of various versions of Splunk Enterprise to include the current upgrade of v9.4.1 with the new WiredTiger Storage, Splunk Enterprise Security Suite v7.3.2 and IT Service Intelligence v4.19.1. Maintains the License Manager, Index Cluster Master, Deployer, Deployment Manager, Search Head Cluster, Search Heads, Universal and Heavy Forwarders on both Pre-Production and Production in SIPR and NIPR environments.Daily tasks include monitoring application availability, application performance, data loading queues, scheduled reports execution, adhoc report failures, data integrity checks, metrics collection processes, environment monitoring portals, and customer and SA ticket requests. Data integrity checks include checking transaction logs for errors and run queues for failed data loads. Resolve the ACAS Certificate findings on Splunk Forwarders.Engaged in Active Directory Management by creating groups and users, adding users to the Splunk User group.Setup new environments in ESM Splunk environment creating indexes, Apps, placing the directories/file in the correct apps, adding hostnames to the correct server classes and reloading the apps pushing out to the Indexers via Deployment Manager. Configure data feeds.