Splunk Administrator

Role and Responsibilities:

• • Experience with Splunk Engineering administration deployment troubleshooting onboarding data and maintenance for a largescale network environment
  • Experience with Linux and Windows agents for Splunk administration with a solid understanding of the Splunk system.
  • Implement and maintain Splunk Platform Infrastructure and Configuration involved in standardizing Splunk forwarder deployment configuration and maintenance across UNIX and Windows platforms
  • Apps/Dashboards for license usage and Application errors.
  • Monitor and maintain Splunk performance availability and capacity Storage performance CPU Memory Forwarder installations and patching upgrades
  • Hands on experience in scripting languages regular expressions to automate tasks and manipulate data KV store collection and lookup management index and search time field extractions
  • Hands on experience in creating & customizing Splunk dashboards visualizations configurations using customized Splunk queries reports scheduled searches and alerts Splunk workflow actions KPI services and undertake daytoday operational and user support
  • Knowledge about Splunk architecture and various components (indexer forwarder search head deployment server) Heavy and Universal Forwarder
  • Hands on experience in scripting languages regular expressions to automate tasks and manipulate data restrict access to sensitive logs/data. Identifying bad searches/dashboards and partnering with the creators to improve performance.
  • Knowledge of enterprise logging including application OS security technology logging and Splunkit framework
  • Lead ProofofConcepts (POC) on Splunk implementation mentored and guided other team members on understand the use case of Splunk
  • Ensure data quality in line with clients use cases and maintain current functional and technical knowledge of the Splunk platform
  • Expertise in writing advanced queries and knowledge on Splunk Development Activities. Knowledge on SPL commands (streaming generating transforming orchestrating & dataset processing commands)
  • Develop reliable efficient queries summary indexes data models that will feed custom alerts and dashboards
  • Provide regular support and guidance to Splunk project teams on complex solution and issue resolution