Splunk Administrator

Looking for a Splunk Administrator for a 6-12 month contract in Irving, TX.

Responsibilities:

- Install, maintain, configure and manage various reporting and monitoring systems
- Monitor systems and report the status to client staff
- Splunk server configurations (web, indexing retention, authentication, etc.)
- Splunk data onboarding operations (inputs, SQL, index-time configurations)
- Splunk data parsing operations (search-time field extractions, eventtypes, tags)
- Manage existing application and create new applications (visual and non-visual)
- Maintain documentation including: what work has been done, what is left to do, and site-specific procedures documenting the Splunk environment.
- Create event processing
- Manage timestamps
- Create indexes for field extractions
- Create and manage host values and source types
- Parse event segmentation
- Manage and ensure proper data fields for file and directory inputs
- Manage network, Windows and any other inputs that may arise (universal forwarders).

Job Requirements:

- Mastery of UNIX/Linux configuration to directly support Splunk
- Expert knowledge of Splunk administration in an enterprise environment