Company: KG Invicta Services Pvt Ltd

Website: Visit Website

LinkedIn: Visit LinkedIn

Business Type: Enterprise

Company Type: Product & Service

Business Model: B2B

Funding Stage: Private Equity

Industry: IT

Salary Range: ₹ 12-14 Lacs PA

Splunk Administrator

Experience: 5 Years Employment Type: Full-Time

Job Summary

We are looking for a skilled Splunk Administrator to manage, maintain, and optimize our Splunk environment. The candidate will be responsible for log ingestion, platform administration, monitoring, troubleshooting, dashboards, alerts, and user access management.

Key Responsibilities

- Install, configure, maintain, and upgrade Splunk Enterprise environments.
- Administer Splunk components including Search Heads, Indexers, Universal Forwarders, Heavy Forwarders, and Deployment Servers.
- Configure and manage data inputs, indexes, sourcetypes, and data retention policies.
- Onboard logs from applications, servers, databases, network devices, and cloud platforms.
- Create and troubleshoot SPL queries, dashboards, reports, alerts, and scheduled searches.
- Monitor Splunk infrastructure health, indexing performance, search performance, and license utilization.
- Troubleshoot issues related to log ingestion, parsing,



indexing, and search performance.
- Manage Splunk users, roles, authentication, and access permissions.
- Perform performance tuning, capacity planning, patching, and configuration changes.
- Maintain Splunk configuration files such as inputs.conf, outputs.conf, props.conf, transforms.conf, and indexes.conf.
- Support production incidents and coordinate with Infrastructure, DevOps, Application, and Security teams.
- Maintain technical documentation and operational procedures.

Required Skills

- 3+ years of hands-on experience with Splunk Administration.
- Strong knowledge of Splunk Enterprise architecture and SPL.
- Experience with Linux/Unix environments.
- Good understanding of TCP/IP, DNS, HTTP/HTTPS, and SSL/TLS.
- Strong troubleshooting and analytical skills.
- Basic scripting knowledge in Shell or Python is an advantage.

Valuable to Have

- Experience with Splunk Enterprise Security (ES) or SIEM environments.
- Splunk Administrator/Power User certification.
- Experience with Splunk Cloud and AWS/Azure/GCP.
- Knowledge of Docker/Kubernetes logging and REST API integrations.

📌 Splunk Administrator (Coimbatore)
🏢 KG Invicta Services (KGiS)
📍 Coimbatore