AWS Splunk Administrator
AWS Splunk Administrator
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Required Qualifications To Be Successful In This Role
810 years of relevant experience
Good Scripting experience in Python
Core Splunk Knowledge
Experience deploying apps within Splunk and administrating the Splunk platform.
Experience with data normalization and data modeling within the Splunk environment.
Experience in creating and managing Splunk DB connects Identities Database connections Database inputs outputs lookups access controls custom alerts custom operations
Strong Understanding of Splunk platform configuration Web UI and Common Information Model.
Basic Understanding of regular expression.
Experience in Splunk Search Processing Language (SPL) and ability to customize queries to do advanced searching.
Experience in performing DevOps activities.
Experience managing objects (fields extractions tags event types lookups workflow actions aliases macros and so on)
Experience in data onboarding/heavy Forwarders/Universal Forwarded
2 years of Experience with Splunk Enterprise on AWS is required
Performs Other Duties As Required Or Assigned
Onboarding of data including but not limited to:
AWS Data
Syslog Data sources
HTTP Event Collector
Administration of Splunk environment Troubleshooting parsing issues
Troubleshooting indexer errors
Configuration of outputs.conf
SSL Certificates for outputs.conf
Desired Skillset
AWS Splunk Enterprise Security Data Models
Troubleshoot issues and platform stabilization
Migration to cloud
Education
Bachelors Degree in Computer Science Information Systems or relevant field of study
Skills
DevOps
Python
Splunk
Unix
Linux
Employment Type
Full Time
