Splunk Administrator in Toronto

Take charge as a Splunk Administrator in major Canadian cities. This contract role focuses on log ingestion monitoring and platform health in an enterprise environment.
Join our team to manage Splunk applications and ensure reliable log delivery across various sources. You will be performing upgrades, collaborating with security and infrastructure teams, as well as documenting technical procedures to enhance operational efficiency. Strong administrator experience with Splunk is essential for this role.
Key Responsibilities:
• Monitor log ingestion volumes with custom searches
• Troubleshoot ingestion interruptions across sources
• Administer log collection components like Logstash
• Manage Splunk configurations on Universal Forwarders
• Collaborate with security teams for onboarding new logs
Requirements:
• 3–5 years of Splunk administration experience
• Familiarity with Splunk Cloud and Heavy Forwarders
• Knowledge of data models and normalization prac...