Technical Specialist - Splunk Optimization and Automation

Technical Specialist-Testing Services

Area(s) of responsibility

✔ Key Responsibilities

Splunk Dashboard & Query Optimization

• Identify and catalogue all Splunk dashboards across applications; perform cleanup of unused dashboards.
• Analyze and optimize heavy or slow-running SPL queries to improve performance and reduce resource consumption.
• Review, refactor, and publish standardized optimized SPL queries for enterprise‑wide usage.

Splunk Index, Cost & Access Governance

• Track index-level usage, user access patterns, and correlate consumption with Splunk license & storage cost.
• Maintain visibility into Users vs Cost to drive optimization recommendations.
• Support 80–100 Splunk indexes and coordinate with 300+ users.

Ingestion & Platform Optimization

• Evaluate and optimize data ingest rates, sourcetypes, and parsing strategies to reduce license cost.
• Apply best practices for data onboarding, retention, and indexing strategy aligned with cost and performance goals.

GenAI Integration

• Explore and apply GenAI‑based optimizations to SPL generation, dashboard improvements, anomaly detection, and operational efficiency.
• Use LLM‑based tools to accelerate triage, query tuning, documentation, and process automation.

Collaboration & Continuous Improvement

• Partner with multi-functional teams, including Dev, Test, Support, Business teams, to ensure consistent and optimized Splunk usage.
• Conduct knowledge‑sharing sessions to educate and mentor teams on optimization best practices.
• Provide guidance on Splunk management for cross-functional stakeholders.

Automation

• Develop automation scripts and workflows using Python, Shell, or REST APIs to identify and eliminate unused dashboards, saved searches, and stale knowledge objects.
• Automate detection of ingest spikes, redundant log sources, and high‑cost sourcetypes to help reduce Splunk license usage.
• Implement automated report generation for index usage, ingest cost, and user access analytics.
• Build automated governance routines to enforce ingest controls, retention adjustments, and object lifecycle management.