Splunk Monitoring

Aeronube Technologies
  • Bangalore
  • 8-10 lakh
  • 5-8 years
  • Views
  • 20 Dec 2017

  • IT/ Information Technology

  • IT/ Technology - Software/ Services
Job Description

24x7x365 Splunk Monitoring
Splunk Software Management
Log Source Integration
Splunk core (worldwide) administration installation, trouble shooting, management, patching, upgrading of all the major components of Splunk:
Indexers, Deployment server, Forwarders, License server, Cluster manager, Search Heads,
Management (i.e. Adding, managing, troubleshooting) of Universal and Heavy Forwarders
Managing alerts coming from reports (e.g. missing end points, failed forwarder, etc.)
Manage Splunk app to measure performance, capacity, license, CPU, storage, etc.
Maintain the run-book for existing procedures
Create new run-book documents for new procedure or issues
Work with the vendor (Splunk Inc.) with problem issues, get, test, & apply patches
Monitor the console for new alerts.
Work the alerts to resolution
Work with IT Security analysts, Windows, Networking, *nix, teams to trouble shoot issues and deploy new clients
Work tickets that are logged by the customers
Create & work the daily, weekly, monthly reports
Use change management process to perform changes to the system
Coordinate any infrastructure work with the infrastructure and SOC teams
Work production stop issues till resolution
Monitor and manage backups
Create restore procedure, and restore corruptions
Skills to create and modify script in perl, unix scripting, Windows scripts

Good to have knowledge of:

oSplunks SPL (Spunk Programming Language)
oSplunk Enterprise Security Module & SIEM
oBackup and recovery of Splunk components
oSearch and Alert Creation
oOperating systems : Linux, UNIX, Windows
oCustom Reporting & Dashboard creation

Competencies/Skill sets for this job

Perl Troubleshooting Vendor Unix It Security Console Clients Soc Scripting

Job Posted By

Nirmalyo Banerjee
Founder & CEO

About Organisation

Aeronube Technologies