- Splunk Deployment & Configuration:
" Design, deploy, and configure Splunk environments.
" Implement forwarders, indexers, and search heads to ensure optimal data flow and indexing.
- Data Onboarding & Parsing:
" Onboard diverse data sources into Splunk, including logs, metrics, and events.
" Create and manage data inputs, props.conf, and transforms.conf for proper parsing and field extractions.
- Performance Optimization:
" Fine-tune Splunk queries, dashboards, and reports for efficiency.
" Optimize indexing and performance.
- Monitoring & Alerting:
" Develop and manage alerts, dashboards, and scheduled reports for various stakeholders. Nice to have: Junior-level skills with Dynatrace
" Implement automation scripts to monitor Splunk infrastructure. **Toronto, Canada location - must be a Canadian resident.