Splunk Admin

About the role

The role is a Splunk administrator responsible for managing a Splunk deployment on a Linux cluster, performing daily system administration, collaborating with other teams, contributing to research and development, and training junior staff.

Responsibilities

• 30% - management of daily Splunk operation systems
• 35% - Linux administration
• 10% - collaborate and liaise with other units and serve as a technical resource and subject matter expert
• 15% - contribute to research and development projects as required
• 10% - train and advise less skilled systems programmers and provide expert technical assistance for others

Requirements

• General understanding of Linux and Splunk administration
• Daily care of verifying Splunk is running properly
• Creation of new indexes
• Updating applications, adding new source types
• Adding new servers and logs to Splunk
• Daily verification of license counts
• Ability to create dashboards and teach others how to make dashboards
• Use of Splunk management console and applications
• Understand and implement application file permissions
• Frequently use version control (git, bitbucket) and configuration management (saltstack, ansible)
• Configuring/maintaining Linux file systems (NFS)
• Technical source to help Windows and Linux admins install the Splunk UF client and verify logs are flowing to the Splunk clusters
• General Linux and Windows knowledge to assist with log collection on the client side
• Ability to train other admins in advanced log searching techniques
• General Splunk troubleshooting techniques and knowledge of working with Splunk (the company)
• Access to the Splunk cluster with authority to implement design improvements if deficiencies are found
• Experience with universal forwarders and Splunk Enterprise version upgrades

Skills

• management
• cluster
• windows
• console
• dashboards
• linux
• splunk