Job Description
Job Description: Must-Have** Experience with Splunk enterprise security is must. Location - PAN India Design and develop detections (correlation searches) in Splunk Enterprise Security Build and maintain Splunk Data Models and ensure proper acceleration Map logs to CIM-compliant data models and fix field mapping issues Convert raw/index-based SPL searches into optimized tstats (datamodel) queries Validate and optimize detections for performance and accuracy Splunk Platform Administration Experience with Splunk enterprise security is must. LDAP / Active Directory integration and troubleshooting Splunk enterprise security
