Key Responsibilities

Splunk Dashboard Development & Reporting

• Design, develop, and customize advanced Splunk dashboards for operational and business monitoring.

• Build interactive reports and dashboards using Splunk Queries (SPL) and XML-based dashboard frameworks.

• Create dashboards from searches, including both inline and scheduled search-based dashboards.

• Develop and manage various chart types, visualizations, and time-series analytics.

Search, Lookups & Knowledge Objects

• Demonstrate strong expertise in Splunk search commands, lookups, and KV store objects.

• Create and manage Splunk knowledge objects such as:

  • Field Aliases

  • Calculated Fields

  • Field Extractions

  • Tags and Event Types

  • Workflow Actions

  • Macros

Monitoring, Alerting & Automation

• Provide end-to-end application monitoring and alerting solutions at enterprise scale.

• Configure and manage:

  • Alerts and alert settings

  • Scheduled reports

  • Automated monitoring triggers

• Implement time chart attributes including span, bins, and aggregation for performance insights.

Administration & Access Control

• Manage Splunk app creation, deployment, and administration.

• Configure user access, roles, and permissions for knowledge objects.

• Create and manage Splunk users, role-based access controls, and security permissions.

Collaboration & Support

• Work closely with cross-functional teams to deliver scalable monitoring solutions.

• Support report sharing, editing, and publishing across stakeholders.

• Ensure dashboards and alerts align with operational requirements and best practices.

Required Skills & Qualifications

• Proven experience in managing and customizing Splunk dashboards.

• Strong hands-on expertise in Splunk SPL, lookups, and KV objects.

• Experience in advanced dashboard development using XML.

• Expertise in building enterprise monitoring and alerting solutions at scale.

• Strong understanding of Splunk knowledge object configuration and management.

• Experience with app creation, user/role permissions, and report sharing.

Preferred Qualifications

• Splunk certification (Power User, Admin, or Architect) is a plus.

• Experience working in large-scale enterprise environments.

• Familiarity with IT Operations, Security Monitoring, or Observability platforms.