JD for Splunk Application support.
Key Responsibilities:
Provide L2/L3 support for Splunk Enterprise and Splunk Cloud platforms.
Monitor and troubleshoot the Splunk infrastructure, including indexers, search heads, forwarders, and deployment servers.
Handle incident and problem management related to Splunk applications and integrations.
Perform log onboarding from various sources and configure inputs/outputs for ingestion.
Develop and support search queries, dashboards, alerts, and reports for internal teams.
Ensure data integrity, retention policies, and optimal indexing and storage usage.
Work with DevOps, Security, and IT operations teams to support monitoring and alerting requirements.
Perform upgrades, patching, and maintenance of the Splunk environment.
Participate in root cause analysis and implement corrective/preventative actions.
