What are the responsibilities and job description for the Splunk Administrator position at SysMind Tech?
Job Title Splunk Admin
Work Location Louisville KY
Relevant Experience (in Yrs) 6 to 10 Years
Technical / Functional Skills Business Knowledge in healthcare domain , Strong debugging and problem solving skills.
Roles & Responsibilities
- Experience in Field Extractions and Transformations using the RegEx in Splunk.
- Experience in Installing, configuring, and administering Splunk Enterprise on Linux and Windows servers.
- Installation and implementation of the Splunk App for Enterprise Security and documented best practices for the installation and performed knowledge transfer on the process.
- Worked on installing Universal Forwarders and Heavy Forwarders to bring any kind of data fields into Splunk.
- Experience in Writing Splunk Queries, Expertise in searching, monitoring, analyzing and visualizing Splunk logs.
- Experience in alert handling, standard availability and performance report generation. Experience in root cause analysis of post-production performance related issues through Splunk tool.
- Experience in Designing, optimizing and executing Splunk-based enterprise solutions.
- Should have Hands on experience in customizing Splunk dashboards, visualizations, configurations using customized Splunk queries.
- Monitored the Splunk infrastructure for capacity planning, scalability, and optimization.
- Experienced in using Splunk- DB connect for real-time data integration between Splunk Enterprise and rest all other databases.
- Expertise in Actuate Reporting, development, deployment, management and performance tuning of Actuate reports.
- Responsible with Splunk Searching and Reporting modules, Knowledge Objects, Administration, Add-On's, Dashboards, Clustering and Forwarder Management.
- Monitored license usage, indexing metrics, Index Performance, Forwarder performance, Splunk Architecture / Engineering and Administration for SOX monitoring and control compliance.
- Design and implement Splunk Architecture (Indexer, Deployment server, Search heads, and Forwarder management), create / migrate existing Dashboards, Reports, Alerts, on daily / weekly schedule to provide the best productivity and service to the business units and other stakeholders.
- Configured Syslog server for the forwarding the logs to Splunk server via network protocols like TCP and UDP.
- Subject matter expert in best practices, security protocols, KPI, and other security-related issues.
- Responsible for troubleshooting various indexing issues by analyzing Splunk logs such as splunkd.log, metrics.log ingested as internal index.
- Support and execute arrangements considering a full information lifecycle (Search & Investigate, Add Knowledge, Monitor & Alert, Report & Analyze). Followed agile and scrum process for the whole implementation process.
- Should be able to support 24X7 environment by being flexible in weekend work.
Generic Managerial Skills Communication, Coordination skills, Offshore Coordination
Education Bachelor or Master Degree
