Learning paths for certification

Extend your understanding of the Splunk platform as a power user. You’ll develop basic competence with searching and reporting commands and be able to create knowledge objects, tags, event types, workflow actions and data models. You’ll use field aliases, calculator fields and macros, and learn how to normalize data with the Common Information Model in the Splunk platform.

Deepen your knowledge and expand your skills in complex searching and reporting commands, advanced use cases for knowledge objects and best practices for building dashboards and forms. By completing this certification, you’ll demonstrate the ability to generate complex searches, reports and dashboards to help you get the most out of your data.

This certification builds competence in managing and configuring details for Splunk Cloud, including data inputs and forwarder configuration, data management, user accounts, basic monitoring and problem isolation. You’ll be able to support the day-to-day administration and health of your organization’s Splunk cloud environment.

Develop expertise in the daily management of Splunk Enterprise. From license management, indexers and search heads to configuration, monitoring and getting data into the Splunk platform, you’ll have the capabilities you need to administer and maintain the health of your organization’s Splunk Enterprise environment.

Gain a thorough understanding of Splunk deployment methodology and the best practices for planning, data collection and sizing of a distributed deployment. You’ll also be able to manage and troubleshoot a standard deployment with indexer and search head clustering.

Expand your understanding of Splunk deployment methodology and implementation for large Splunk platform installations. You’ll also gain expert-level knowledge of multi-tier Splunk architecture, clustering and scalability. With this certification, you’ll be able to properly size, install and implement Splunk software instances and advise others how to use the product for maximum value.

Enhance your ability to manage a Splunk Enterprise Security environment. Your expertise will include event processing and normalization, deployment requirements, technology add-ons, risk analysis settings, threat intelligence, protocol intelligence configuration and customizations. With this certification, you’ll be able to install, configure and manage a Splunk Enterprise Security deployment.

Grow your knowledge of monitoring mission-critical services with Splunk IT Service Intelligence. This certification teaches you to install and configure Splunk ITSI architecture, including deployment planning, service design and implementation, notable events and development of glass tables and deep dives.

Learn how to install, configure and use Splunk SOAR servers and plan, design, create and debug basic SOAR playbooks. You will gain expertise in complex SOAR solution development and will be able to integrate SOAR with the Splunk platform and develop playbooks requiring custom coding and REST API usage.

Enhance your Splunk Observability Cloud monitoring. You’ll take your work beyond logs and be able to use real-time monitoring at scale for every layer of the development environment. This certification path teaches you how to deploy and configure the OpenTelemetry Collector to send in metrics, find insights using analytics, visualize metrics, alert with detectors, and create efficient dashboards.