Date:
Jan 31, 2025
Location:
Any Marlabs Office Location, IN
Company:
Marlabs Innovations Pvt Ltd
Description:
| Organization | Marlabs is a digital innovation company helping enterprises innovate & capture digital opportunities to enable swifter solutions. Our focus is to help each of our clients find and capture their unique opportunities and empower them with digital technologies so that they can run a purposeful business. Visit and know more about us – www.marlabs.com |
| Job Title | Splunk Administrator |
| Years of Exp | 3 to 5 Years Exerience |
| Skills | Splunk Administration |
| Responsibilities | Job Summary: We are seeking a skilled Splunk Administrator to manage, maintain, and optimize our Splunk platform. The ideal candidate will play a key role in ensuring seamless operation, monitoring, and analysis of logs and system data across our IT infrastructure. This role involves system configuration, troubleshooting, and creating dashboards, alerts, and reports to support business and security objectives. Key Responsibilities: Splunk Administration: Install, configure, upgrade, and maintain Splunk environments (e.g., Enterprise, Cloud, ITSI). Manage Splunk deployment servers, search heads, indexers, and forwarders. Maintain data ingestion pipelines and ensure log data integrity. Monitoring and Optimization: Monitor system performance, resource utilization, and availability. Tune and optimize Splunk performance, including indexing and searching. Implement best practices for log data retention and storage optimization. Development and Integration: Create and maintain Splunk dashboards, reports, alerts, and data models. Develop custom solutions for log ingestion and parsing using Splunk queries and scripts. Integrate Splunk with other IT and security tools (e.g., SIEM, SOAR). Troubleshooting and Support: Identify and resolve Splunk-related issues, including system errors, data ingestion failures, and query performance. Collaborate with IT and security teams to troubleshoot infrastructure and application logs. Collaboration and Documentation: Work with stakeholders to understand log analysis requirements and deliver solutions. Document processes, configurations, and architecture for reference and audits. Qualifications: Education: Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience). Experience: Proven experience as a Splunk Administrator or in a similar role. Strong knowledge of Splunk architecture, components, and configurations. Experience with Splunk SPL (Search Processing Language) for creating queries and dashboards. Technical Skills: Familiarity with Linux/Unix and Windows operating systems. Experience with scripting languages like Python, Shell, or PowerShell. Knowledge of data onboarding and parsing using props and transforms. Understanding of networking, system logs, and common data formats (e.g., JSON, XML, CSV). Experience with ITSI, UBA, or other Splunk premium applications (preferred). Certifications (Preferred): Splunk Certified Administrator Soft Skills: Excellent analytical and problem-solving skills. Strong communication and collaboration abilities. Attention to detail and ability to work in a fast-paced environment. |