Splunk administration support, including operation and maintenance of the log aggregation and Security Information and Event Management (SIEM) platform.
Perform systems analysis, modify, and update systems and related data ingestion parameters based on results of analysis, deploy applications and tools, perform testing of deployed applications and tools, and communicate updates to the customer.
Establish and maintain configuration and technical support, assist in the technical design process, and provide guidance/direction to customer on how to best get value from Splunk products.
Maintain, upgrade, and troubleshoot SPLUNK servers, clusters, and management systems.
Install, upgrade, and maintain required SPLUNK applications and add-ons.
Provide performance and license tuning for systems and troubleshoot SPLUNK components across multiple network environments.
Provide solution engineering support to ensure systems and components meet current and future standards.
Develop, create, deploy, and manage custom SPLUNK monitors, alerts, and dashboards.
Monitor SPLUNK for cluster status, health status, and other issues, and resolve as needed.
Manage patching and updates of Splunk hosts and/or Splunk application software.
Monitor and audit configurations and participate in the Change Management process to ensure that unauthorized changes do not occur.