We are looking for a Splunk Engineer with 3 to 4 years of experience to manage and scale our Splunk environment. You will be responsible for setting up Splunk infrastructure, connecting data sources, and writing search queries. Additionally, you will help us monitor business health using Splunk ITSI.
1. Splunk Deployment & Management
- Set up, configure, and maintain Splunk components (Search Heads, Indexers, and Forwarders).
- Monitor the health of the Splunk setting and manage license usage.
- Bring in new data from various sources (servers, cloud, security logs) and make sure it is correctly formatted.
2. Searches & Dashboards (SPL)
- Write strong, efficient Splunk SPL queries to find and analyze data.
- Build clear dashboards, alerts, and reports to help different teams monitor their systems.
3. Splunk ITSI (IT Service Intelligence)
- Configure and maintain Splunk ITSI to monitor business services and system health.
- Create service dependencies, KPIs, and Glass Tables (custom dashboards) within ITSI.
- Use ITSI to cut through the noise and quickly find the root cause of system outages.
What We Are Looking For
- Experience: 3€“4 years of hands-on experience as a Splunk Engineer or Administrator.
- Core Splunk Skills: Strong experience deploying and managing Splunk infrastructure.
- SPL Expertise: Excellent skills in writing Splunk SPL queries for data analysis.
- ITSI Knowledge: Solid understanding of Splunk ITSI concepts (Services, KPIs, Entities, and Notable Events).
- System Basics: Good knowledge of Linux commands and regular expressions (Regex) for data cleaning.