Splunk Data Administrator (Melbourne)

Splunk Data Administrator (Melbourne)

24 Sep
|
FR Consultancy
|
Melbourne

24 Sep

FR Consultancy

Melbourne

Status

AU valid visa with full work rights

Requisites

- 5–10 years experience with Splunk administration and data onboarding (or equivalent depth).
- Solid practical knowledge of:
- Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
- props.conf / transforms.conf, sourcetypes, timestamps, line-breaking
- TA installation/configuration and deployment patterns across Splunk tiers

- Experience with complex Splunk architectures:

- Indexer clusters, SH/SHC, forwarder management, deployment server
- Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies

- Comfortable writing and validating SPL for data quality and CIM compliance.

- Cloud: AWS/Azure/GCP logging patterns (nice-to-have)

#J-18808-Ljbffr

📌 Splunk Data Administrator (Melbourne)
🏢 FR Consultancy
📍 Melbourne

Reply to this offer

Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.

Subscribe to this job alert:

Get the latest job offers by email for: splunk data administrator (melbourne) / melbourne

Subscribe to this job alert:

Get the latest job offers by email for: splunk data administrator (melbourne) / melbourne