Walk-in || Splunk Administrator

Role & responsibilities

• Install, configure, administer, and maintain Splunk Enterprise and Splunk Cloud environments.
• Manage Splunk components including Indexers, Search Heads, Forwarders, Deployment Servers, Cluster Masters, and License Masters.
• Perform Splunk upgrades, migrations, patching, and capacity planning activities.
• Configure and manage data onboarding from servers, applications, databases, cloud platforms, and security tools.
• Develop and maintain Splunk knowledge objects including dashboards, reports, alerts, lookups, and saved searches.
• Monitor Splunk infrastructure health, troubleshoot performance issues, and optimize search efficiency.
• Implement index management, data retention policies, and storage optimization.
• Configure role-based access control (RBAC) and ensure compliance with security standards.
• Support SIEM use cases and integrate Splunk with security platforms.
• Create automation scripts using Python, Shell, or PowerShell to streamline administration tasks.
• Collaborate with infrastructure, application, and security teams for incident resolution and monitoring enhancements.
• Provide operational support, root cause analysis, and documentation.