I'm Deepashree Vijaykumar, Deepa for short: a Splunk Consultant at Deploy Partners in Sydney, Australia, specialising in Splunk ITSI, observability and fault monitoring for large telecommunications networks.
I build Splunk ITSI fault monitoring that turns raw network alarms into the right incident, on its own.
A Splunk consultant and Splunk Core Certified Power User, working on Splunk ITSI correlation searches, notable events and episodes, service models and KPIs, and automated routing to BMC Helix.
I build and fix the searches that carry SNMP traps across large telecommunications networks, and write the design documents that keep them auditable.
What I build
Five parts of my work, drawn so you can try them. Scroll through, or click one.
01From my work
Fewer, better incidents.
The problem
One network fault can raise hundreds of alarms at once.
What I build
I write the correlation searches that fold them into one episode.
And 1,235 more. The real cause is in here somewhere.
Illustrative numbers, not client data.
02From my work
Break something and watch it travel.
The problem
A broken box says little about what the business feels.
What I build
I build service models and KPIs that weight what matters most.
The outcome
You see the impact on the service, not just an alert.
Splunk ITSI service models, KPIs, health scores
Click a KPI to break it.
Mobile networkHealthy100
RadioHealthy100
CoreHealthy100
TransportHealthy100
Everything is healthy.
Illustrative weights and scores. A KPI with importance 11 caps its parent's health.
03From my work
A log line gets smarter.
The problem
A raw event says what happened, but not whether it matters.
What I build
I onboard critical data sources and enrich event logs with correlation searches.
The outcome
Threats are spotted sooner, as one notable event with its context.
Cybersecurity monitoring, Splunk Enterprise Security, detection use cases
Before
Failed login for jsmith from 203.0.113.42
After
Assetvpn-gw-01, high criticality
Identityj.smith, Finance
LocationOverseas, a first for this user
Threat intelAddress on a known bad list
Risk score80 of 100
Notable eventBrute force login on a critical asset. High urgency.
Illustrative event, not client data.
04From my work
Messy in, structured out.
The problem
Syslog and SNMP traps arrive as raw, uneven text.
What I build
I onboard them with forwarders and Splunk Connect for SNMP into named fields.
The outcome
One search works across every source.
Field extraction, normalisation, Splunk Connect for SNMP
Raw syslog
Oct 12 03:14:07edge-rtr-07LINK-3-DOWN: Interface ge-0/0/1 down
Named fields
time
12 Oct, 03:14:07
host
edge-rtr-07
severity
3, error
event
Link down
interface
ge-0/0/1
05From my work
Built to scale across AU/NZ.
The problem
One server cannot take in, keep and search a whole network's data.
What I build
I architected a clustered Splunk environment across AU/NZ, with heavy forwarders and an indexer cluster.
The outcome
Reliable ingestion and fast search, with data copied across nodes.
Forwarders, heavy forwarders, indexer clustering, search heads
Click a tier to see what it does.
Network gear, servers and apps write logs and alarms all day.
Small agents on each source send the data on, and resend anything that does not arrive.
Parses, filters and routes the data before it is stored.
Indexers store the data and copy it across nodes, so nothing is lost if one fails.
Where people run searches and dashboards across every indexer at once.
Experience
to now
Now
Splunk Consultant
Deploy Partners · Sydney, Australia
1 yr 5 mo
Designed the Splunk ITSI correlation searches that turn a telco's SNMP traps into BMC Helix incidents.
Built the service models, KPIs and KV store lookups behind fault correlation, and fixed auto-ticketing defects.
Moved Elastic dashboards and fault alerting into Splunk, and became the go-to for search logic.
to
Intern
Innovadeas Pty Ltd · Sydney, Australia
4 mo
Successfully deployed and integrated AI agents utilizing various models from Hugging Face, gaining hands-on experience with real-world applications.
Gained experience in applying LLMs to specific tasks and projects, expanding practical knowledge beyond theoretical concepts.
Automated test execution using Selenium and Playwright with TypeScript, and maintained regression test cases.
Coordinated with developers and business analysts to improve software testing processes.
to
Administrator
Bonfect Snackfood Service · Sydney, Australia
2 yrs 5 mo
Ran day-to-day administration of the Amazon Vendor Central account, keeping operations smooth and customers well looked after.
Maintained the inventory database that tracked stock availability and informed decisions.
Worked with Amazon Vendor Central management to resolve issues and plan for sales growth.
to
Systems Engineer
Cerner Corporation · India
1 yr 11 mo
Oversaw large-scale infrastructure of more than 500 servers.
Built Splunk dashboards and proactive alerting that gave the whole estate operational visibility.
Installed and managed Splunk forwarders across Linux and Windows for log management.
Toolkit
Fault monitoring
Splunk ITSI
Correlation searches
Notable events and episodes
Service models and KPIs
BMC Helix / Remedy
Splunk platform
SPL
Dashboard Studio
KV Store and lookups
Splunk Connect for SNMP
Splunk Enterprise Security
Beyond Splunk
AWS
New Relic
Python
Linux
REST
SIEM
Certifications
Splunk · SPLK-1002
Splunk Core Certified Power User
Splunk · SPLK-1001
Splunk Core Certified User
Splunk · Legacy
Splunk IT Service Intelligence Certified Admin
AWS
Cloud Practitioner Essentials
New Relic
Observability Practitioner
UTS
Women in Engineering and IT
Questions I am asked
What do you do as a Splunk ITSI consultant?+
I work as a Splunk consultant at Deploy Partners in Sydney, Australia. I build Splunk ITSI fault monitoring that turns raw network alarms into the right incident on its own. My work covers correlation searches, notable events and episodes, service models and KPIs, and automated routing to BMC Helix. I also write the design documents that keep the searches auditable.
How does SNMP fault monitoring reach BMC Helix incidents?+
I build and fix the searches that carry SNMP traps across large telecommunications networks. Correlation searches group related traps into episodes, service models and KPIs show what is affected, and KV store lookups add the context that routes each episode to the right BMC Helix incident. I also fix auto-ticketing defects so the routing stays reliable.
Are you a cybersecurity engineer?+
My title is Splunk Engineer, and much of that work is cybersecurity engineering on Splunk. At Deploy Partners I onboard critical data sources, enrich event logs with correlation searches for faster threat identification, and build detection use cases and custom alerting in Splunk Enterprise Security. I also architected a clustered Splunk environment across AU/NZ, with heavy forwarders and an indexer cluster.
Where are you based?+
I am based in Sydney, Australia, and work in the greater Sydney area. My current role is with Deploy Partners in Sydney. Before that I worked in infrastructure monitoring in India, then moved to Sydney for administration and internship roles before returning to Splunk consulting. Email hi@deepa.dev to reach me, or find me on LinkedIn.
What certifications do you hold?+
I hold Splunk Core Certified Power User (SPLK-1002) and Splunk Core Certified User (SPLK-1001), plus Splunk IT Service Intelligence Certified Admin. I also hold AWS Cloud Practitioner Essentials and New Relic Observability Practitioner, and completed Women in Engineering and IT at UTS. They match the toolkit I use daily: Splunk ITSI, SPL, AWS and New Relic.