Course Offering
- IT Training
- IT Certification Training
- New Courses
- Course Savings
- Guaranteed To Run Courses
- Fast Lane LIVE E-Learning
- Hack Academy
-
Fast Lane IT Workshops»
- Fast Lane Training
- Guaranteed Dates
- Public Schedule
- Featured Topics
- Professional Services
- Training by Vendor
- Amazon Web Services»
- Arista Training
- Aruba»
- Barracuda»
-
Cisco»
- What's New
- CLC Eligible Events
- Cisco Training
- Cisco Guaranteed Dates
- Certification
- Public Schedule
- Digital Learning Libraries
- Cisco Professional Services
- Channel Partner Area
- Cisco Continuing Education
- Featured Topics
- Black Belt Academy Aligned
- CyberOps
- DevNet
- Cisco Digital Network Architecture (DNA)
- EC-Council
- Gigamon
- Google Cloud»
- Microsoft»
- NetApp»
- Palo Alto Networks»
- Red Hat»
- Splunk»
- Wireshark / Packet Analysis
- VMware»
-
Other Vendors»
- AudioCodes
- Avaya
- Brocade
- Check Point
- Citrix
- CompTIA
- CWNP
- Cybersec First Responder
- Cydrill Application Security
- Extreme Networks
- F5 Networks
- Fortinet Training
- HPE
- Infoblox
- Juniper Networks
- KnowBe4
- Micro Focus
- Oracle
- Pulse Secure
- Ribbon
- Ruckus
- Salesforce
- SUSE
- Symantec
- Trend Micro
- UNIX/Linux Training
- Veeam
- ITIL & Project Management»
- PRINCE2®
- Scaled Agile
- Training by Technology
- Artificial Intelligence (AI)
- Cloud Computing
- Cyber Security
- Data Center
- DevOps Software Deployment
- End User Training
- Software Development
- Wireless & Mobility
- Professional Services
- Consulting & Professional Services
- Home
- Splunk Certifications
Splunk Certifications
Splunk Certifications
Splunk Certification Tracks
We recommend all candidates begin with our Splunk Core tracks, which contain knowledge and skills applicable to both Enterprise and Cloud customers.
For candidates to earn certifications with maximum efficiency, and to simplify the training process, we have designed Certification-Based Learning Paths for each. We also offer Fast Tracks for select certifications. Fast Tracks are bundles which enable candidates to complete all prerequisite certifications on the way to their goal certification.
Click on a certification or Learning Path to learn more.
SPLUNK CORE CERTIFIED USER
A Splunk Core Certified User is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This foundational, entry-level certification demonstrates an individual's basic ability to navigate and use Splunk software.
Before attending the Learning Path, please complete the following free e-learning modules:
- What is Splunk? (WIS) (free)
- Intro to Splunk (ITS) (free)
- Using Fields (Free) (SUFF) (free) OR Using Fields (SUF) (includes hands-on labs)
- Scheduling Reports & Alerts (SRA)
- Visualizations (SVZ)
Full Package: Splunk Core Certified User Learning Path (SCCU-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
This Learning Path contains the following modules:
- Statistical Processing (SSP)
- Working with Time (WWT)
- Leveraging Lookups and Subsearches (LLS)
- Search Optimization (SSO)
- Enriching Data with Lookups (EDL)
- Data Models (SDM)
SPLUNK CORE CERTIFIED POWER USER
A Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions and data models, and normalize data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms. This foundational, entry-level certification demonstrates an individual's foundational competence of Splunk’s core software.
Before attending the Learning Path, please complete the following free e-learning modules:
- What is Splunk? (WIS) (free)
- Intro to Splunk (ITS) (free)
- Using Fields (Free) (SUFF) (free) OR Using Fields (SUF) (includes hands-on labs)
- Scheduling Reports & Alerts (SRA)
- Visualizations (SVZ)
Full Package: Splunk Core Certified Power User Learning Path (SCCPU-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
This Learning Path contains the following modules:
- Statistical Processing (SSP)
- Working with Time (WWT)
- Comparing Values (SCV)
- Result Modification (SRM)
- Correlation Analysis (SCLAS)
- Search Under the Hood (SUH) (e-learning)
- Intro to Knowledge Objects (IKO) (e-learning)
- Creating Knowledge Objects (CKO)
- Creating Field Extractions (CFE)
- Data Models (SDM)
- Using Choropleth (SUC)
SPLUNK CORE CERTIFIED ADVANCED POWER USER
A Splunk Core Certified Advanced Power User has greater depth of knowledge and skills in complex searching and reporting commands, advanced use cases of knowledge objects, and best practices for building dashboards and forms. This certification demonstrates an individual’s ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data.
Before attending the Learning Path, please complete the following free e-learning modules:
- What is Splunk? (WIS) (free)
- Intro to Splunk (ITS) (free)
- Using Fields (Free) (SUFF) (free) OR Using Fields (SUF) (includes hands-on labs)
Full Package: Splunk Core Certified Advanced Power User Learning Path (SPCCAPU-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
This Learning Path contains the following modules:
- Multivalue Fields (SMV)
- Search Optimization (SSO)
- Introduction to Dashboards (ITD)
- Dynamic Dashboards (SDD)
Fast Track Including Prerequisites: Splunk Core Certified Advanced Power User: Fast Track (SPCCAPU-FT)
SPLUNK CLOUD CERTIFIED ADMIN
A Splunk Cloud Certified Admin manages and configures details for Splunk Cloud, including data inputs and forwarder configuration, data management, user accounts, and basic monitoring and problem isolation. This certification demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Cloud environment.
Candidates who wish to prepare for the Splunk Cloud Certified Admin exam are recommended to complete either of the following modules:
- Splunk Cloud Administration (SCA)(net-new administrators)
- Transitioning to Splunk Cloud (TSC) (experienced on-premises administrators migrating to cloud)
Fast Tracks Including Prerequisites: Choose Your Focus
Splunk Cloud Certified Admin (New): Fast Track (SCCA-FT)
Splunk Cloud Certified Admin (On-Prem): Fast Track (SCCAOP-FT)
SPLUNK ENTERPRISE CERTIFIED ADMIN
A Splunk Enterprise Certified Admin manages various components of Splunk Enterprise on a daily basis, including license management, indexers and search heads, configuration, monitoring, and getting data into Splunk. This foundational, moderate-level certification, designed for Enterprise administrators, demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Enterprise environment
Candidates who wish to prepare for the Splunk Enterprise Certified Admin exam are recommended to complete the following modules:
Fast Track Including Prerequisites: Splunk Enterprise Certified Admin: Fast Track (SECA-FT)
SPLUNK ENTERPRISE CERTIFIED ARCHITECT
A Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering.
This highly technical certification, designed for Enterprise architects, demonstrates an individual's ability to deploy, manage, and troubleshoot complex Splunk Enterprise environments.
Full Package: Splunk Enterprise Certified Architect Learning Path (SPECA-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
This Learning Path contains the following modules:
- Troubleshooting Splunk Enterprise (TSE)
- Splunk Cluster Administration (SCLA)
- Architecting Splunk Enterprise Deployments (ASED)
- Splunk Deployment Practical Lab (SDPL)
SPLUNK CORE CERTIFIED CONSULTANT
A Splunk Core Certified Consultant has a thorough understanding of Splunk Deployment Methodology and implementation in large Splunk installations and has expert-level knowledge of multi-tier Splunk architectures, clustering, and scalability topics. This certification demonstrates a Consultant's ability to properly size, install, and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs.
Full Package: Splunk Core Certified Consultant: Certification-Based Learning Path (SCCC-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
Certification Tracks for Splunk Add-Ons
We also offer app-specific certifications for many of our most popular Splunk add-ons.
SPLUNK ENTERPRISE SECURITY CERTIFIED ADMIN
A Splunk Certified Enterprise Security Admin manages a Splunk Enterprise Security environment, including ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customizations.
This app-specific certification, designed for Splunk Enterprise Security administrators, demonstrates an individual's ability to install, configure, and manage a Splunk Enterprise Security deployment.
Candidates who wish to prepare for the Splunk Certified Enterprise Security Admin exam are recommended to complete the following module:
SPLUNK IT SERVICE INTELLIGENCE CERTIFIED ADMIN
A Splunk IT Service Intelligence Certified Admin is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This foundational, entry-level certification demonstrates an individual's basic ability to navigate and use Splunk software.
Candidates who wish to prepare for the Splunk IT Service Intelligence Certified Admin exam are recommended to complete the following module:
- !SP-ISITSI
SPLUNK SOAR CERTIFIED AUTOMATION DEVELOPER
A Splunk SOAR Certified Automation Developer installs, configures, and uses SOAR servers and plans, designs, creates, and debugs basic playbooks for Splunk SOAR. These highly skilled individuals are proficient in complex SOAR solution development, and can integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage.
This certification demonstrates an individual's knowledge and skills in installing and configuring a SOAR server and integrating it with Splunk, as well as planning, designing, creating, and debugging playbooks.
Formerly referred to as Splunk Phantom Certified Admin
Full Package: Splunk SOAR Certified Automation Developer Learning Path (SOARAD-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
This Learning Path contains the following modules:
- Administering SOAR (ASOAR)
- Developing SOAR Playbooks (DSOARP)
- Advanced SOAR Implementation (ASOARI)
SPLUNK CERTIFIED DEVELOPER
A Splunk Certified Developer builds apps using the Splunk Web Framework. This certification, specifically designed for developers on the Splunk platform, demonstrates an individual's expertise in drilldowns, advanced behaviors and visualizations, planning, creating, and packaging apps, and REST endpoints.
Full Package: Splunk Core Certified Developer Learning Path (SCD-CBLP)
NOTE: Upon purchase, you have 1 year to sit all the individual course modules.
This Learning Path contains the following modules:
- Introduction to Dashboards (ITD)
- Dynamic Dashboards (SDD)
- Using Choropleth (SUC)
- Advanced Dashboards & Visualizations with Splunk (ADVS)
- Building Splunk Apps (BAWS)
- Developing with Splunk's REST API (DSRAPI)