Splunk Administrator

Job Description:
Splunk administrators have a wide range of responsibilities, which can include:

• Installing updates and patches on the Splunk platform to ensure it is running smoothly
• Monitoring system performance and capacity to ensure that it can handle the workload of the entire organization
• Configuring new data inputs to allow the collection of new data types or formats
• Creating alerts and notifications to notify stakeholders of unusual activity such as security breaches or system failures
• Maintaining documentation of all configurations and changes to the system
• Performing basic troubleshooting when issues occur with the system to identify the cause
• Analyzing data in order to identify patterns, trends, or other useful information
• Providing support to users who are having problems with the system or using it incorrectly
• Auditing and reviewing security practices to prevent security incidents, such as data breaches, denial of service attacks, or malware infections