back to top

Job Description

Splunk Administrator

Expires on: December, 1 2020
Job Code: VL/UT/0311/D/217
Experience: 4-6 Years
Location: Hyderabad

Experience in design, implementation, and support of Splunk Cloud (Indexers, Forwarders, and Search-Heads Setup etc.)

  • As a Splunk Administrator, this role should Manage, Support and Administer Splunk Cloud environment
  • Work closely with onboarding teams and security team ensuring technical Issues and projects are correctly logged and managed to the correct priority
  • Occasionally need to work at the weekend when there is a patching or platform maintenance work
  • Identifying bad searches/dashboards and partnering with the creators to improve performance
  • Support the day to day operation of a highly available distributed multi-clustered multi-tenant Splunk deployment
  • Support on boarding and maintenance of a wide variety of data sources to include various OS, appliance, and application logs
  • Create queries, dashboards, and visualizations to support customer requirements and monitoring of the Splunk deployment
  • Troubleshooting Splunk performance issues / Opening support cases with Splunk
  • Monitor the Splunk infrastructure for capacity planning and optimization
  • Troubleshoot log feeds, field extractions, search time, etc
  • Provide Granular, Role-based Security
  • Restrict access to sensitive logs/data
  • Report generation ad customization
  • Experience in design, implementation, and support of Splunk Cloud (Indexers, Forwarders, and Search-Heads Setup etc.)
  • Experience with implementing and administering Splunk
  • Experience in on boarding new data, feeding new information, Creating new dashboards, Extraction info through Splunk
  • Experience with Linux and Windows agents for Splunk administration with a solid understanding of the Splunk system
  • Good knowledge on Splunk ITSI Module
  • Experience with Splunk Enterprise Security Premium Application
  • Ability to create operations documentation for maintaining the Splunk infrastructure
  • Setting up Splunk Forwarding for new application tiers introduced into the environment
  • Understand Splunk Data Model and be able to fix its related issues
  • Regularly carry monitoring detect log source outages and working with on-boarding team to get them resolved
  • Strong understanding of SPL (Search Platforming Language) as well as the ability to develop automated search and apps using Python or bash/shell scripting
  • Linux system administration skills, preferably Centos Or RHEL
  • Experience in Security aspects

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.