Description

Key Skills: Splunk,  Splunk administration

Roles and Responsibilities:

• Maintain multi-site Splunk Search Head and Indexer clusters, ensuring stability, replication, and correct configuration.
• Manage Heavy Forwarders (HF), Universal Forwarders (UF), and Deployment Servers (DS), including rollout and troubleshooting.
• Integrate and onboard logs from Unix and Windows sources; diagnose and resolve data ingestion issues.
• Modify Splunk configuration files (props.conf, transforms.conf, inputs.conf) and manage required add-ons (e.g., DB Connect, ServiceNow).
• Create and tune reports, alerts, dashboards, and Splunk IT Service Intelligence (ITSI) use cases; support security hardening and performance optimization.

Skills Required:

• 5 - 15 years of relevant experience in Splunk administration and log management operations.
• Splunk administration and operational support for Splunk Enterprise environments.
• Cluster and forwarder management for Search Heads/Indexers and HF/UF/DS deployment.
• Configuration management using props.conf, transforms.conf, and inputs.conf for ingestion and parsing.
• Monitoring and optimization of Splunk performance, including access control and integration with SIEM/Enterprise Security.

Good to Have:

• Experience administering Splunk in enterprise environments with ITSI and security-focused use cases.

Education: B.Tech / B.Tech M.Tech (Dual) in Computer Science or related branches

Key Skills

Education

Any Graduate