IT Engineer – Splunk Optimization & Cost Reduction

Ищем администратора / инженера Splunk Enterprise (on-premises) с фокусом на оптимизацию и снижение затрат.

Локация: не РФ/РБ
IT Engineer – Splunk Optimization & Cost Reduction

We are looking for a Splunk IT Engineer to help reduce on-premises Splunk costs.

The main goal is to optimize data pipelines so that only necessary logs are indexed and stored, while maintaining system visibility and performance.

Key Responsibilities

Reduce Splunk License Usage
• Monitor daily data volume
• Identify useless, duplicate, or noisy logs
• Set up filters to drop or clean data before it is indexed into Splunk

Smart Storage Management
• Manage on-prem storage tiers: hot, warm, cold, and frozen
• Move older or compliance-only logs to cheaper archive storage instead of expensive primary storage

Smarter Log Routing
• Set up intermediate routing tools such as Cribl or Splunk Heavy Forwarders
• Filter unnecessary data before it reaches Splunk
• Route high-priority logs to Splunk for alerting
• Route low-priority logs directly to cheaper backup storage

Cost Tracking & Approvals
• Build dashboards showing which teams or servers consume the most Splunk data
• Create a basic review process so teams justify costs before adding new logs to Splunk

Fix Slow Searches
• Audit poorly written searches and dashboards
• Optimize searches and dashboards that consume excessive CPU and hardware resources

Required Skills & Experience
• Strong experience managing on-premises Splunk Enterprise environments
• Proven experience filtering and reducing data volume to lower costs
• Familiarity with data routing tools such as Cribl, Logstash, or Splunk Heavy Forwarders
• Experience managing storage tiers: SSD, HDD, and long-term archives

Nice to Have
• Splunk Admin certification

По вопросам и резюме: контакт скрыт

———
Контакт: контакт скрыт

#lookfor #outstaff