Muruganantham Pothanaickar
Senior Software Engineer & Splunk Developer
Professional Summary
Senior Splunk Administrator and Developer with 8+ years of experience specializing in AiOps applications, custom visualizations, and platform automation. Official SplunkBase Contributor and Content Creator at Soft Mania.
Key Achievements & Expertise
- Developed custom Splunk + ReactJS dashboards with external REST API integration
- Engineered Base Search & Summary Indexing, increasing dashboard performance by 40%
- Managed large-scale distributed deployments (32+ HFs, Indexer Clusters) on AWS & Linux
- Created and published the "Config Merger" App on Splunkbase
- Automated PMO reporting via JIRA API integrations, saving 63 hours/month
Project Experience Showcase
Global Financial Institution
Key Contributions
- Architected the query optimization framework for 500+ expensive searches
- Developed custom ReactJS + Splunk dashboards for real-time license monitoring
- Implemented Base Search & Summary Indexing strategies reducing search times by 60%
- Built automated alerting for license threshold breaches with JIRA ticket creation
"Muruganantham's deep expertise in query optimization transformed our entire Splunk environment. His custom dashboards gave our SOC unprecedented visibility, and the search performance improvements were beyond what we thought possible."
Technology Consulting Firm
Key Contributions
- Designed and built 15+ executive dashboards with custom PDF export functionality
- Created automated PMO reporting pipelines integrating JIRA APIs with Splunk
- Developed custom visualizations using jQuery for Change Request process flow analysis
- Implemented cost tracking dashboards to monitor and optimize license consumption
"The dashboard solutions Muruganantham delivered are world-class. His ability to integrate external APIs with Splunk and create actionable executive reporting has fundamentally changed how our leadership team makes data-driven decisions."
Enterprise Splunk ES & SOAR Implementation for Global Manufacturing Company
Key Contributions
- Architected a distributed Splunk deployment with Indexer Cluster, Search Head Cluster, Cluster Manager, Heavy Forwarders, and Deployment Server
- Integrated Windows, Linux, Palo Alto, Cisco ASA, Microsoft Defender, CrowdStrike, Office 365, AWS CloudTrail, Azure AD, and VMware logs
- Implemented CIM compliance, data models, event types, tags, and field normalization across all data sources
- Developed 120+ correlation searches, risk-based alerting, and MITRE ATT&CK-aligned detections
- Designed SOAR playbooks for phishing response, ransomware containment, account lockout, and IOC enrichment
- Implemented index lifecycle policies, SmartStore, and license optimization strategies
"The SIEM transformation delivered by the Splunk architecture team significantly improved our visibility, reduced investigation time, and enabled our SOC to respond faster to advanced threats."
Multi-Tenant Splunk Platform for Managed Security Service Provider (MSSP)
Key Contributions
- Designed a multi-tenant Splunk Enterprise Security architecture supporting multiple customer environments
- Automated customer onboarding using Deployment Server, Heavy Forwarders, REST APIs, and configuration management
- Created reusable onboarding frameworks for Windows, Linux, Cloud, Firewall, DNS, Proxy, Email Security, and Endpoint Security logs
- Developed reusable CIM-compliant parsing rules, lookups, macros, dashboards, and detection content
- Built infrastructure monitoring dashboards for indexer health, search performance, ingestion latency, and license consumption
- Implemented CI/CD pipelines for Splunk app deployment using Git, Jenkins, and REST APIs
"The multi-tenant Splunk platform provided excellent scalability, simplified customer onboarding, and enabled our SOC teams to deliver managed security services much more efficiently."
Global Telecommunications SIEM Transformation
Key Contributions
- Designed a highly available Splunk architecture with Indexer Clustering, Search Head Clustering, SmartStore, Deployment Server, License Manager, and Monitoring Console
- Integrated logs from Windows, Linux, Cisco, Palo Alto, F5, DNS, VPN, Microsoft Defender, CrowdStrike, AWS, Azure, Kubernetes, and application platforms
- Developed 200+ enterprise dashboards, executive reports, and operational health monitoring solutions
- Implemented Risk-Based Alerting, MITRE ATT&CK mapping, and 200+ correlation searches in Splunk Enterprise Security
- Automated infrastructure provisioning and Splunk app deployments using Ansible, Jenkins, Git, and Splunk REST APIs
- Optimized data onboarding, index management, and search performance, reducing infrastructure costs while improving platform scalability
- Mentored engineering teams and established Splunk architecture standards, onboarding procedures, and operational best practices
"Muruganantham's architectural leadership transformed our security operations platform. His expertise in large-scale Splunk deployments, Enterprise Security, and automation enabled us to achieve exceptional performance, scalability, and operational efficiency while supporting thousands of critical systems."