We are looking for a Splunk Developer with 3 to 4 years of hands-on experience in building dashboards, writing complex SPL queries, and onboarding diverse data sources into Splunk. In this role, you will work closely with system administrators, security analysts, and development teams to turn raw log data into actionable insights, automated alerts, and real-time operational metrics.

Key Responsibilities:
Dashboard &
Report Creation:

Build, optimize, and maintain interactive Splunk dashboards, reports, and visual panels using SimpleXML, HTML, and Splunk Web.
SPL Development: Write effective, modular Search Processing Language (SPL) queries for real-time monitoring, event correlation, and trend analysis.
Data Onboarding: Ingest data into Splunk from various sources (Syslog, Windows Event Logs, REST APIs, database inputs, and flat files). Configure props.conf and transforms.conf for field extractions and event breaking.
Alerting &
Automation:

Create and tune Splunk alerts to trigger notifications and integrate with external ticketing tools (e.g., ServiceNow, Jira) using webhooks and REST APIs.
Data Models &
Lookups:

Build and maintain data models, KV stores, and static/energetic lookups to accelerate search performance across large datasets.
Maintenance &
Troubleshooting:





Troubleshoot data ingestion issues, field extraction errors, and query performance bottlenecks.

Required Technical Skills &
Experience:
Core Splunk: 3+ years of dedicated development experience on Splunk Enterprise or Splunk Cloud.
Advanced SPL: Solid proficiency in using Splunk commands, statistical functions, subsearches, and transaction/eval logic.
Log Analysis: Experience handling log formats such as JSON, XML, CSV, Syslog, and custom application logs.
Scripting Skills: Basic to intermediate skills in Python, Bash, or PowerShell for custom data collection scripts and automation.
Web Basics: Knowledge of HTML, CSS, JavaScript, or JSON for custom dashboard formatting.
Operating Systems: Comfortable navigating Linux (RHEL/Ubuntu) and Windows environments for log collection and agent setup.

Nice-to-Have Skills:
Splunk Certification: Splunk Core Certified Power User or Splunk Core Certified Developer.
Cloud Exposure: Exposure to monitoring AWS, Azure, or GCP environments using Splunk Add-ons.
Splunk DB Connect: Experience using Splunk DB Connect for relational database integrations.

Pay: ₹600,000.00 - ₹800,000.00 per year

Work Location: In person

📌 Splunk Developer Bengaluru
🏢 all soft solutions
📍 Bengaluru