Title: Technical Specialist-Testing Services
Area(s) of responsibility
✔ Key Responsibilities
Splunk Dashboard & Query Optimization
- Identify and catalogue all Splunk dashboards across applications; perform cleanup of unused dashboards.
- Analyze and optimize heavy or slow-running SPL queries to improve performance and reduce resource consumption.
- Review, refactor, and publish standardized optimized SPL queries for enterprise‑wide usage.
Splunk Index, Cost & Access Governance
- Track index-level usage, user access patterns, and correlate consumption with Splunk license & storage cost.
- Maintain visibility into Users vs Cost to drive optimization recommendations.
- Support 80–100 Splunk indexes and coordinate with 300+ users.
Ingestion & Platform Optimization
- Evaluate and optimize data ingest rates, sourcetypes, and parsing strategies to reduce license cost.
- Apply best practices for data onboarding, retention, and indexing strategy aligned with cost and performance goals.
GenAI Integration
- Explore and apply GenAI‑based optimizations to SPL generation, dashboard improvements, anomaly detection, and operational efficiency.
- Use LLM‑based tools to accelerate triage, query tuning, documentation, and process automation.
Collaboration & Continuous Improvement
- Partner with multi-functional teams, including Dev, Test, Support, Business teams, to ensure consistent and optimized Splunk usage.
- Conduct knowledge‑sharing sessions to educate and mentor teams on optimization best practices.
- Provide guidance on Splunk management for cross-functional stakeholders.
Automation
- Develop automation scripts and workflows using Python, Shell, or REST APIs to identify and eliminate unused dashboards, saved searches, and stale knowledge objects.
- Automate detection of ingest spikes, redundant log sources, and high‑cost sourcetypes to help reduce Splunk license usage.
- Implement automated report generation for index usage, ingest cost, and user access analytics.
- Build automated governance routines to enforce ingest controls, retention adjustments, and object lifecycle management.