Description
Job Description: Candidate should have worked and deployed the Splunk enterprise software including Splunk Universal forwarder across different projects / organizations.Mandatory Tool requirements:
• Splunk Enterprise software: Should be in a position to look at the logs, identify all the available information that can be extracted for the applications where the Splunk forwarder software is deployed. Have the ability to create queries, generate reports (including graphical) and setup alerts + dashboards on the Splunk console. Suggest any improvements for the application based on the indexed log data. Knowledge on the Splunk administration is required.
• Splunk Universal Forwarder: Has the ability to install and configure Splunk forwarder across different operating systems. Ability to create filters to pass only required log data for indexing and hence saving license costs.
Operating Systems (mandatory): Should have worked across different operating systems - i.e Windows and *nix based machines.
Logs knowledge (desirable): Knowledge on the different webserver / application / operating system logs such as apache, IIS, weblogic, tomcat, windows event logs etc.
Troubleshooting (desirable): Capability for self-learning and troubleshoot any issues including installation / generating reports etc.
Language (any): Knowledge on Splunk SDKs, available in Python / Java / Javascript / PHP / Ruby to integrate with third-party reporting tools and portals is helpful.