Splunk Certifications¶
Splunk is a platform for searching, monitoring and analyzing machine data: logs, metrics and events from applications, infrastructure and security tools. It is used for IT operations, security monitoring and business analytics, and it comes as Splunk Enterprise (run by you) and Splunk Cloud Platform (run by Splunk).
Splunk's certification page lists a ladder of core, administration, architecture and security certifications. Splunk certification registration and exam history now run through Cisco's systems, a change the Splunk page announces on its face.
Where to start¶
Start with the entry-level Core Certified User. It has no prerequisites and teaches the search language every other Splunk exam builds on.
Study guides in this repo¶
1 certification in this repo. Counts and statuses are generated from docs/certs.json.
| Cert | Code | Level | Status | Notes |
|---|---|---|---|---|
| Splunk Core Certified User | Not stated on the Splunk certification page or the test blueprint | Foundational | Ready | 6 |
Not covered yet¶
The Splunk page also lists Core Certified Power User, Advanced Power User, Cloud and Enterprise Admin, Architect, Consultant, a metrics user exam for Splunk Observability Cloud and cybersecurity defense exams. This repo has a guide only for the Core Certified User; the others have not been read on their own pages yet.
Training and lab access¶
- 📖 Splunk certification page - the current list of certifications
- 📖 Splunk Docs - official documentation
- 📖 Splunk Search Tutorial - hands-on introduction