NeedDev

Ищем администратора / инженера Splunk Enterprise (on-premises) с фокусом на оптимизацию и снижение затрат. Локация: не РФ/РБ IT Engineer – Splunk Optimization & Cost Reduction We are looking for a Splunk IT Engineer to help reduce on-premises Splunk costs. The main goal is to optimize data pipelines so that only necessary logs are indexed and stored, while maintaining system visibility and performance. Key Responsibilities Reduce Splunk License Usage • Monitor daily data volume • Identify useless, duplicate, or noisy logs • Set up filters to drop or clean data before it is indexed into Splunk Smart Storage Management • Manage on-prem storage tiers: hot, warm, cold, and frozen • Move older or compliance-only logs to cheaper archive storage instead of expensive primary storage Smarter Log Routing • Set up intermediate routing tools such as Cribl or Splunk Heavy Forwarders • Filter unnecessary data before it reaches Splunk • Route high-priority logs to Splunk for alerting • Route low-priority logs directly to cheaper backup storage Cost Tracking & Approvals • Build dashboards showing which teams or servers consume the most Splunk data • Create a basic review process so teams justify costs before adding new logs to Splunk Fix Slow Searches • Audit poorly written searches and dashboards • Optimize searches and dashboards that consume excessive CPU and hardware resources Required Skills & Experience • Strong experience managing on-premises Splunk Enterprise environments • Proven experience filtering and reducing data volume to lower costs • Familiarity with data routing tools such as Cribl, Logstash, or Splunk Heavy Forwarders • Experience managing storage tiers: SSD, HDD, and long-term archives Nice to Have • Splunk Admin certification По вопросам и резюме: @vadimvalch ——— Контакт: @Catherine_Gerasimova #lookfor #outstaff