Core Skills - Splunk Enterprise and Splunk Cloud Administration
- Distributed Splunk Architecture, Search Heads, Indexers, Forwarders, and Deployment Server
- Data Onboarding, Index and Sourcetype Management, Parsing, and Data Retention
- SPL Development, Dashboards, Reports, Alerts, Field Extractions, and Lookups
- Platform Monitoring, Performance Tuning, Troubleshooting, Upgrades, and Production Support
-
- Splunk Enterprise, Splunk Cloud, Splunk Monitoring Console, and Splunk DB Connect
- Splunk Deployment Server, Universal Forwarder, and Heavy Forwarder
- Linux, Unix, Windows Server, and Microsoft Azure
- ServiceNow, Git, REST APIs, and Syslog
- Python and Shell Scripting
Functional/Technical Skills - Splunk installation, configuration, distributed-environment administration, and forwarder management
- Application, infrastructure, database, network, cloud, and security-log onboarding
- Configuration of indexes, sourcetypes, inputs, outputs, data retention, event breaking, and timestamp extraction
- User and role management, application deployment, license monitoring, health checks, performance tuning, upgrades, and production support
- SPL searches, dashboards, reports, alerts, scheduled searches, field extractions, and knowledge objects
-
- Splunk Power User
- Spunk Enterprise Certified Admin
- Splunk Cloud Certified Admin
- Splunk Enterprise Security Certified Admin
|
