Splunk to grafana migration engineer

Splunk → Grafana Migration Engineer Timeline : 11 / 24 / 2025-1 / 30 / 2026 Interviews : Thursday (20 / 11) & Friday (21 / 11) Working Hours : 1 : 30-9 : 30pm IST

Purpose :

Execute the migration of existing Splunk dashboards, searches, and alerts into Grafana.

This role focuses exclusively on Grafana-side implementation to include dashboards, queries, and alerting with no responsibilities for data ingestion configuration, data-source integration, RBAC, or architecture.

• Client should be complete with the data ingestion cutover by the time this resource starts. This resource will be responsible for migrating 66 dashboards from Splunk to Grafana (will have a team of 3 to assist). Their contract with Splunk ends on 1 / 15 / 26 so need this complete ASAP

Responsibilities

Convert existing Splunk dashboards into Grafana dashboards using Prom QL, Log QL, variables, and Grafana transformations.

Translate Splunk SPL queries into equivalent Prom QL (metrics) and Log QL (logs) using existing, already-configured data sources.

Rebuild Splunk alerts as Grafana Alerting Rules, including conditions, thresholds, and notifications.

Optimize dashboards for performance and maintainability.

Build reusable dashboard templates and standardized visual patterns to ensure consistency across teams.

Validate migrated dashboards and alerts with engineering teams to ensure they meet or exceed original functionality.

Provide guidance to internal teams on best practices for Prom QL / Log QL query writing and dashboard usage.

Work with engineering teams when needed to verify labels, metric availability, or log fields without modifying ingestion pipelines. Required Skills & Experience Grafana Expertise (Must-Have)

3+ years building production Grafana dashboards at scale.

Strong proficiency with :

Prom QL (complex aggregations, rate functions, histograms, label filters)

Log QL (parsing, filters, pattern matching, metadata extraction)

Grafana alerting (unified alerting, multi-condition rules, notification rules)

Dashboard variables, transformations, templating

YAML-based dashboard provisioning

Experience with MVP-level dashboard performance tuning. Splunk Experience (For Translation)

Ability to read and interpret SPL queries, saved searches, and alert conditions.

Ability to translate SPL logic into Prom QL / Log QL equivalents while maintaining intended behavior.

Familiarity with Splunk dashboard constructs (tokens, drilldowns, logic) to properly map them into Grafana. Observability Knowledge (Must-Have)

Strong understanding of logs vs metrics and how they map into Loki-style querying.

Ability to correlate metrics and logs in Grafana for equivalent observability outcomes compared to Splunk. Nice-to-Have Skills

Experience migrating Splunk dashboards to Grafana in a previous engagement.

Familiarity with Grafana Loki.

Experience with distributed tracing correlation (nice but optional).

Basic scripting (Python, Bash) for automating dashboard provisioning. Deliverables Expected

Scope : Defined Splunk dashboards recreated in Grafana.

Query Translation : All SPL → Prom QL / Log QL migrations documented and validated.

Alert Migration : Equivalent Grafana alert rules replacing existing SPL alerts.

Validation & Knowledge Transfer : Peer programming, engineering knowledge transfer, and verification sessions with consuming teams to confirm fidelity to Splunk dashboards.