02 Oct
|
ITbility
|
Melbourne
02 Oct
ITbility
Melbourne
We are looking for a Splunk Data Administrator this is Permanent role in Melbourne.
Required Skills:
5–10 years experience with Splunk administration and data onboarding (or equivalent depth).
Robust practical knowledge of:
Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
TA installation/configuration and deployment patterns across Splunk tiers
Experience with complex Splunk architectures:
Indexer clusters, SH/SHC, forwarder management, deployment server
Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
Comfortable writing and validating SPL for data quality and CIM compliance.
Robust log source knowledge across common domains:
Cloud: AWS/Azure/GCP logging patterns (nice-to-have)
All candidates should have full working rights in Australia. Only shortlisted candidates will be contacted for this role.
J-18808-Ljbffr
📌 Data Administrator Melbourne
🏢 ITbility
📍 Melbourne