• Splunk Certified Admin
• Extensive working knowledge of Splunk architecture and various components (indexer, forwarder, search head, deployment server), as Splunk system administrator.
• Strong software development fundamentals and skills.
• Setting up Splunk Forwarding for new application tiers introduced into the environment.
• Identifying bad searches/dashboards and partnering with the creators to improve performance.
• Troubleshooting Splunk performance issues / Opening support cases with Splunk.
• Monitor the Splunk infrastructure for capacity planning and optimization.
• Troubleshoot log feeds, field extractions, search time, etc.
• Experience with Container platforms: Docker, K8S and alternatives.
• Experience working with Linux environment and Unix scripting.