Skip to main content
Splunk Lantern

Setting roles and responsibilities

A Splunk implementation team is made up of roles with different strengths and skills with Splunk software and within your general business. These roles reflect the business skills needed to fulfill the role's duties, and do not necessarily map directly to the Splunk platform default user roles - for example, one person on your Splunk team can fulfill more than one role.

Roles and responsibilities are a good way to manage an incentive-based access model to encourage your user community to build and grow their Splunk software skills.

Splunk roles and responsibilities

Here are common roles in a Splunk implementation, their general focus, and the recommended minimum level of Splunk education required for that role.

Splunk role and responsibilities Required skills Recommended education requirements

Architect

  • Designs and optimizes Splunk platform architecture for large-scale and distributed deployments
  • Establishes best practices and development standards, and ensures that the team adopts them
  • Maintains a close partnership with Splunk on feature requests, upgrade planning, and product roadmap alignment
  • Experience with interconnected, heterogeneous systems
  • Strong understanding of industry standards and technologies

Learning Path:

Courses for Splunk Architects

Certification:

Splunk Enterprise Certified Architect

Developer

  • Develops and customizes Splunk apps and dashboards
  • Implements integration with external systems
  • Builds advanced visualizations
  • Basic web design
  • Scripting (such as Python or other)

Learning Path:

Courses for App Developers

Certification:

Splunk Certified Developer

Engineer

  • Implements and maintains Splunk platform infrastructure and configuration
  • Undertakes day-to-day operational and user support
  • Executes new projects as well as data and user onboarding
  • Staffs help desk for Splunk platform system-related assistance
  • WIN or *nix systems administration
  • Networking background
  • Familiarity with common infrastructure technologies

Learning Path:

Courses for Splunk Administrators

Certification:

Splunk Certified Admin

Executive sponsor

  • Endorses and provides resources for the Splunk software investment
  • Brokers political alignment at the executive level
  • Strong business acumen
  • Management experience
  • Considered an 'influencer' at the organization
  • Actively engaged in promoting Splunk software as a solution, service, or strategy

Learning Path:

Courses for Splunk Users

Certification:

Splunk Core Certified Power User

Search expert

  • Customizes queries
  • Promotes advanced searching, forensics, analytics
  • Effects creative solutions to complex problems
  • Staffs help desk for search-related assistance
  • Splunk Search Processing Language (SPL)
  • Splunk solution expert knowledge

Learning Path:

Courses for Splunk Users

Certification:

Splunk Core Certified Advanced Power User

Knowledge manager

  • Manages data onboarding and defining configurations
  • Performs data interpretation, classification, and enrichment
  • Builds data models
  • Manages knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on)
  • Configures summary-based reports and data model acceleration
  • Experience with basic Splunk Search Processing Language (SPL)
  • Strong understanding of Splunk platform configuration, web UI and Common Information Model
  • Basic understanding of regular expressions

Learning Path:

Courses for Splunk Users

Certification:

Splunk Core Certified Advanced Power User

Program manager

  • Manages the Splunk implementation team
  • Ensures Splunk implementation meets business requirements
  • Provides oversight on projects and cross-departmental initiatives
  • Spearheads communication to stakeholders
  • Facilitates maturity of the Splunk implementation team and user base through education programs
  • Strong business acumen
  • Management experience
  • Some project management
  • There should be only one program manager

Learning Path:

Courses for Splunk Users

Certification:

Splunk Core Certified Power User

Project manager

  • Scopes project requirements
  • Manages project timelines
  • Communicates progress and risks to stakeholders
  • Bridges interactions between stakeholders and Splunk implementation team
  • Chief cat herder
  • Project management expertise
  • Excellent communication skills
  • Detailed knowledge of organizational and business process

Learning Path:

Courses for Splunk Users

Certification:

Splunk Core Certified Power User

User community

  • Appreciates the value returned from Splunk analytics and reports
  • Consumes reports, dashboards, alerts, and other use case-related dashboards
  • May also include users who are Splunk Certified Power Users
  • Varying levels of technical competencies and experience with SPL
  • Can consume dashboards and alerts or write searches if inclined
  • Experience with web browsers

Learning Path:

Courses for Splunk Users

Certification:

Splunk Core Certified Power User

More resources

  • Was this article helpful?