Splunk Admin

Role: Splunk Admin
Experience: 05 to 12yrs
Notice Period: 70-90 Days
Work Location: TCS-Gurgaon
Mode of Interview: Virtual
Responsibilities :-
5–12 years of IT experience with strong hands-on expertise in Splunk Administration and enterprise deployments.
Install, configure, upgrade, and maintain Splunk Enterprise environments, including Search Heads, Indexers, and Forwarders.
Manage Splunk Cluster Management, Indexer Clustering, Search Head Clustering, and distributed architecture.
Configure data ingestion, indexes, sourcetypes, inputs, outputs, and forwarder management.
Strong knowledge of SPL (Search Processing Language), dashboards, alerts, reports, and scheduled searches.
Monitor Splunk platform health, capacity, licensing, storage, and overall system performance.
Troubleshoot indexing, search performance, data ingestion, connectivity, and configuration issues.
Experience with Linux/Unix administration, Shell/Python scripting, REST APIs, and automation is preferred.
Implement RBAC, authentication, security controls, backup, disaster recovery, and Splunk best practices.
Collaborate with Security, DevOps, Infrastructure, and Application teams to support Splunk monitoring and observability solutions.
Note : Ex TCSer can't apply

Work arrangement
No