Job Description

Experience in design, implementation, and support of Splunk (Indexers, Forwarders, Search-Heads Setup etc)

Experience with implementing and administering Splunk.

Good understanding with virtualization technologies (Hypervisor, VMware, etc)

Apps/Dashboards for license usage and Application errors.

Experience with Linux and Windows agents for Splunk administration with a solid understanding of the Splunk system.

Ability to create operations documentation for maintaining the Splunk infrastructure.

Primary Skills

Setting up Splunk Forwarding for new application tiers introduced into the environment.

Identifying bad searches/dashboards and partnering with the creators to improve performance.

Troubleshooting Splunk performance issues / Opening support cases with Splunk.

Monitor the Splunk infrastructure for capacity planning and optimization.

Troubleshoot log feeds, field extractions, search time, etc.

Secondary Skills

Provide Granular, Role-based Security.

Restrict access to sensitive logs/data

Experience in onboarding new data, Inputting new information, Creating new dashboards, Extraction info through splunk

Report generation ad customization