29 Sep
|
FR Consultancy
|
Australia
29 Sep
FR Consultancy
Australia
Status
AU valid visa with full work rights
Requisites
5–10 years experience with Splunk administration and data onboarding (or equivalent depth).
Solid practical knowledge of:
Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
props.conf / transforms.conf, sourcetypes, timestamps, line-breaking
TA installation/configuration and deployment patterns across Splunk tiers
Experience with complex Splunk architectures:
Indexer clusters, SH/SHC, forwarder management, deployment server
Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
Comfortable writing and validating SPL for data quality and CIM compliance.
Cloud: AWS/Azure/GCP logging patterns (nice-to-have)
J-18808-Ljbffr
📌 Splunk Data Administrator Melbourne (Australia)
🏢 FR Consultancy
📍 Australia