Company: KG Invicta Services Pvt Ltd Website: Visit Website LinkedIn: Visit LinkedIn Business Type: Enterprise Company Type: Product & Service Business Model: B2B Funding Stage: Private Equity Industry: IT Salary Range: ₹ 12-14 Lacs PA

Job Description
Splunk Administrator

Experience:
5 Years Employment Type: Full-Time Job Summary We are looking for a skilled Splunk Administrator to manage, maintain, and optimize our Splunk environment. The candidate will be responsible for log ingestion, platform administration, monitoring, troubleshooting, dashboards, alerts, and user access management.

Key Responsibilities
• Install, configure, maintain, and upgrade Splunk Enterprise environments.
• Administer Splunk components including Search Heads, Indexers, Universal Forwarders, Heavy Forwarders, and Deployment Servers.
• Configure and manage data inputs, indexes, sourcetypes, and data retention policies.
• Onboard logs from applications, servers, databases, network devices, and cloud platforms.
• Create and troubleshoot SPL queries, dashboards, reports, alerts, and scheduled searches.
• Monitor Splunk infrastructure health, indexing performance, search performance, and license utilization.
• Troubleshoot issues related to log ingestion, parsing,



indexing, and search performance.
• Manage Splunk users, roles, authentication, and access permissions.
• Perform performance tuning, capacity planning, patching, and configuration changes.
• Maintain Splunk configuration files such as inputs.conf, outputs.conf, props.conf, transforms.conf, and indexes.conf.
• Support production incidents and coordinate with Infrastructure, DevOps, Application, and Security teams.
• Maintain technical documentation and operational procedures. Required Skills
• 3+ years of hands-on experience with Splunk Administration.
• Strong knowledge of Splunk Enterprise architecture and SPL.
• Experience with Linux/Unix environments.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, and SSL/TLS.
• Robust troubleshooting and analytical skills.
• Basic scripting knowledge in Shell or Python is an advantage. Good to Have
• Experience with Splunk Enterprise Security (ES) or SIEM environments.
• Splunk Administrator/Power User certification.
• Experience with Splunk Cloud and AWS/Azure/GCP.
• Knowledge of Docker/Kubernetes logging and REST API integrations.

📌 Splunk Administrator (Coimbatore)
🏢 KG Invicta Services (KGiS)
📍 Coimbatore