SERVICES/SPLUNK/COACHING

Become a Splunk dashboard rockstar with 1:1 coaching.

Level up your Splunk Fu with tailored 1:1 coaching. We’ll dive into Splunk search mechanics, best practices, data exploration and discovery, dashboard development, and reporting.

Schedule a free 15-minute Audition to learn more about Splunk coaching sessions, and also get a feel for my style and chops. Quick question? Feel free to email.

LAUNCH PROMOTION: Private lessons booked in May are discounted 50%.

My Splunk orbit: customer, Splunker, ISV, consultant, & customer (reprise).

My Splunk Orbit

I was first introduced to Splunk in 2010 when I worked for US Customs & Border Protection. After a few years of championing the Splunk cause, I traded my cubicle for a position with Splunk, where I helped Federal agencies leverage the platform to solve complex problems.

I founded RedFactor in 2018. We brought three apps to market that are now free and open source: dvvy, rqst, and kvkit. I also led the development of a patient privacy solution for NewYork-Presbyterian (NYP) hospital. This innovative solution was featured in Blueprints for Success and has been prominently featured on the .conf main stage. Check out my .conf18 talk for more info.

I joined True Zero Technologies in 2019, where I started a healthcare practice and implemented patient privacy solutions for multiple healthcare organizations. I also did some Splunk professional services work, including an engagement at US Courts where I developed a solution to streamline Splunk user adoption.

In 2021, I accepted a position with NYP. I lead teams of cybersecurity practitioners, developers, and data analytics engineers that defend the enterprise and create bespoke solutions to solve unique operational challenges. I continue to advance patient privacy, drug diversion detection, and other Splunk capabilities.

FAQ

Find a one-hour timeslot that works for you and lock it in. At the scheduled time, join the online meeting for your tailored coaching session.

Coaching sessions are focused on the presentation layer of Splunk – specifically search mechanics, dashboard development, and reporting. I will tailor the session to your experience level, subject matter, and desired outcome. You can expect practical advice on:

  • The foundational aspects of Splunk search
  • Major search commands (SPL)
  • Data exploration and discovery methodology
  • Techniques for dashboard development and report creation

I designed these coaching sessions with new(-ish) Splunk users and admins in mind, or really anyone interested in leveling up their Splunk Fu when it comes to the presentation layer of Splunk Enterprise or Splunk Cloud.

My goal with these sessions is to provide practical and actionable guidance – moving you forward in meaningful ways towards your Splunk reporting goals, saving you time, and eliminating frustration. Breaking down the technical stuff in a way that easy to understand and zeroing in on what matters most.

Calendars can be complex and stuff happens. I do my best to be flexible and accommodate changes.

Rescheduling
If your original time slot doesn’t work for you, you have the ability to reschedule four (4) or more hours from your session time on this website. If you need to reschedule closer to your appointment time, please email. To do this, simply click the Reschedule link in your confirmation email.

Cancellations
If you need to cancel for any reason and do so on this website within four (4) hours of your scheduled session, I will happily issue you a full refund less nonrefundable credit card processing fees of $4.48 (2.9% + 30¢ for domestic transactions). To do this, simply click the Cancel link in your confirmation email. If you need to cancel closer to your appointment time, please email.

No-Shows
A no-show is a session that is missed without a request to reschedule or cancel. In such a situation, refunds are not issued. If there were extenuating circumstances for the absence (emergency, illness, etc.), the session may be rescheduled without additional cost. Two (2) no-shows will result in forfeiture of dollars and termination of our business relationship.

We’ll spend the session in the Splunk user interface – generally a local instance that I manage but optionally your environment if allowed. I’ll educate you on important search concepts, execute a number of searches to introduce SPL syntax, walk through my methodology for dashboard creation by creating a dashboard, and answering your burning questions along the way.

If you would like to learn more or discuss your specific needs, consider booking a free introductory session (a/k/a “Audition”) to chat live.

An introductory session (“Audition”) gives us an opportunity to meet ahead of time and briefly discuss your needs. This is generally helpful, but isn’t required. If nothing else, the Audition sets the stage, which brings more focus to the Jam Session.

Due to the terms of my current employment, I am not able to work with any healthcare organizations.

Further, while it should go without saying, I’ll err on the side of over-communication: I will not render services to any individual or entity that is engaged in criminal, questionable, or otherwise shady activity.