IN_Associate _Splunk Platform Support Engineer- IN _IT Services Co

Job Description

A strong team player who will be the part of the core Global team managing PwC Splunk infrastructure. Minimum 01year handson experience in Splunk Enterprise administration, Troubleshooting SIEM platform management and having working experience in 24/7 shift model. Managing, Troubleshooting and deploying Global Splunk Enterprise ( Distributed & Clustered ) components in medium to large sized customers/territories. Monitor & Keep the Splunk Enterprise instances in good health to serve our customers with highest platform availability. Monitor & Manage Splunk Platform Incidents, Triage, troubleshoot to fix them and escalate to different stakeholders to resolve the Splunk Incidents by working in 24/7 working shift model. Managing Splunk Access Roles & Administering Splunk App for Enterprise Security (ES) log management and SIEM solutions. Create / Troubleshoot parser & scripts used for custom log source integration with Splunk. Troubleshooting Splunk modules/app, Report filters & queries, Splunk Access Issues & also issues with log source integration. Consulting with customers to customize and configure Splunk to meet their requirements. Remediation of logging issues like Logging outages, Parsing, Time GAP, Field extraction issues and Maintenance. Platform Health Conducting regular Splunk Infra health checks, monitoring and taking actions to keep the Splunk environment UP and Healthy for our internal customers. Visualizations Have to create visualizations in Splunk and custom queries to improve views & dashboards used for Splunk internal problem solving. Migrations Handling Splunk forwarders migration & Log source Redirection effort required in the Data Center Migration/ Movement / Decommissioning Projects . Fixing Issues Tracking & Remediation of Splunk UF/ HF forwarding issues & helped in maintaining a healthy log flow. Hygiene Effort Cleaning up the Splunk environment by deleting unused configurations & App Upgrade Testing and upgrading Splunk apps required to ingest & visualize log data. Splunk Upgrade Work closely with the engineering team in Splunk component upgradation activity. Mandatory skill sets SIEM Operation, Splunk, Linux, Networking & Firewall fundamentals. Preferred skill sets Splunk admin