Splunk Administration

Sukrthi Recruits; Coimbatore District; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Sukrthi Recruits in Coimbatore (India) is seeking an experienced Splunk Administrator to install, configure, and maintain Splunk Enterprise environments. You will administer Search Heads, indexers, Universal Forwarders, and Deployment Server, and onboard logs from various sources including cloud platforms.

You will develop and troubleshoot SPL queries, dashboards, reports while monitoring licensing and performance. This role requires strong problem-solving skills and Linux/Unix proficiency.

Qualifications

• 3+ years hands-on experience with Splunk administration.
• Experience with Linux/Unix environments.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS and SSL/TLS.

Responsibilities

• Install, configure, maintain, and upgrade Splunk Enterprise environments.
• Administer Splunk components including Search Heads, indexers, Universal Forwarders, Deployment Servers.
• Onboard logs from applications, servers, databases, network devices, and cloud platforms.
• Create and troubleshoot SPL queries, dashboards, reports, alerts, and scheduled searches.
• Monitor Splunk infrastructure health, indexing performance, search performance, and license utilization.
• Troubleshoot issues related to log ingestion, parsing, indexing, and search performance.
• Maintain Splunk configuration files such as inputs.conf, outputs.conf, props.conf, transforms.conf, indexes.conf.
• Support production incidents and coordinate with Infrastructure, DevOps, Application, and Security teams.

Skills

Splunk

Linux/Unix

SPL

Troubleshooting

Shell/Python basics

Tools

Splunk Enterprise

Job description

Coimbatore South, India | Posted on 10/27/2026

Install, configure, maintain, and upgrade Splunk Enterprise environments.Administer Splunk components including Search Heads, indexers, Universal Forwarders, Deployment Servers.Heavy Forwarders, and Configure and manage data inputs, indexes, source types, and data retention policies.Onboard logs from applications, servers, databases, network devices, and cloud platforms.Create and troubleshoot SPL queries, dashboards, reports, alerts, and scheduled searches.Monitor Splunk infrastructure health, indexing performance, search performance, and license utilization.Troubleshoot issues related to log ingestion, parsing, indexing, and search performance.Manage Splunk users, roles, authentication, and access permissions.Perform performance tuning, capacity planning, patching, and configuration changes.Maintain Splunk configuration files such as inputs.conf, outputs.conf, props.conf, transforms.conf, and indexes.conf.Support production incidents and coordinate with Infrastructure, DevOps, Application, and Security teams.Maintain technical documentation and operational procedures.

Requirements

• 3+ years of hands-on experience with Splunk Administration. Strong knowledge of Splunk
• Enterprise architecture and SPL. Experience with Linux/Unix environments.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, and SSL/TLS.
• Strong troubleshooting and analytical skills.
• Basic scripting knowledge in Shell or Python is an advantage.