Splunk to Grafana Migration Engineer

Splunk ? Grafana Migration Engineer

Timeline: 11/24/2025-1/30/2026

Interviews: Thursday (20/11) & Friday (21/11)

Working Hours: 1:30-9:30pm IST

Purpose:

Execute the migration of existing Splunk dashboards, searches, and alerts into Grafana.

This role focuses exclusively on Grafana-side implementation to include dashboards, queries, and alerting with no responsibilities for data ingestion configuration, data-source integration, RBAC, or architecture.

**Client should be complete with the data ingestion cutover by the time this resource starts. This resource will be responsible for migrating 66 dashboards from Splunk to Grafana (will have a team of 3 to assist). Their contract with Splunk ends on 1/15/26 so need this complete ASAP

Responsibilities

• Convert existing Splunk dashboards into Grafana dashboards using PromQL, LogQL, variables, and Grafana transformations.
• Translate Splunk SPL queries into equivalent PromQL (metrics) and LogQL (logs) using existing, already-configured data sources.
• Rebuild Splunk alerts as Grafana Alerting Rules, including conditions, thresholds, and notifications.
• Optimize dashboards for performance and maintainability.
• Build reusable dashboard templates and standardized visual patterns to ensure consistency across teams.
• Validate migrated dashboards and alerts with engineering teams to ensure they meet or exceed original functionality.
• Provide guidance to internal teams on best practices for PromQL/LogQL query writing and dashboard usage.
• Work with engineering teams when needed to verify labels, metric availability, or log fields without modifying ingestion pipelines.

Required Skills & Experience

Grafana Expertise (Must-Have)

• 3+ years building production Grafana dashboards at scale.
• Strong proficiency with:
• PromQL (complex aggregations, rate functions, histograms, label filters)
• LogQL (parsing, filters, pattern matching, metadata extraction)
• Grafana alerting (unified alerting, multi-condition rules, notification rules)
• Dashboard variables, transformations, templating
• YAML-based dashboard provisioning
• Experience with MVP-level dashboard performance tuning.

Splunk Experience (For Translation)

• Ability to read and interpret SPL queries, saved searches, and alert conditions.
• Ability to translate SPL logic into PromQL/LogQL equivalents while maintaining intended behavior.
• Familiarity with Splunk dashboard constructs (tokens, drilldowns, logic) to properly map them into Grafana.

Observability Knowledge (Must-Have)

• Strong understanding of logs vs metrics and how they map into Loki-style querying.
• Ability to correlate metrics and logs in Grafana for equivalent observability outcomes compared to Splunk.

Nice-to-Have Skills

• Experience migrating Splunk dashboards to Grafana in a previous engagement.
• Familiarity with Grafana Loki.
• Experience with distributed tracing correlation (nice but optional).
• Basic scripting (Python, Bash) for automating dashboard provisioning.

Deliverables Expected

1. Scope: Defined Splunk dashboards recreated in Grafana.
2. Query Translation: All SPL ? PromQL/LogQL migrations documented and validated.
3. Alert Migration: Equivalent Grafana alert rules replacing existing SPL alerts.
4. Validation & Knowledge Transfer: Peer programming, engineering knowledge transfer, and verification sessions with consuming teams to confirm fidelity to Splunk dashboards.