Splunk Admin with HEC Clusters.

Hi
Contract
Role:  Splunk Admin with HEC Clusters.
Location:   Atlanta, GA  (Onsite)

JD:

1. Analyze and lead data onboarding requirement discussions with consumers of Splunk Enterprise to determine scope and feasibility
2. Integrate data streams, feeds from network, infrastructure services, mission critical/business applications into Splunk using the Splunk Universal Forwarder, Syslog, Splunk Heavy Forwarders and Splunk HEC Clusters.
3. Perform troubleshooting of existing feeds that are no longer collecting data (quiet source monitoring).
4. Interact with internal Splunk users base for the development, management and tuning of Splunk dashboards, knowledge objects, ad-hoc/scheduled searches and alerts.
5. Interpret and apply new technical and system capabilities as needed to provide updates, enhancements, and modifications to an existing Splunk environment.

Danny@ampstek.com

609-920-9222