Scribd
Upload
234 views

Splunk Test Blueprint User

The Splunk Core Certified User exam is a 60 question, 60 minute exam that certifies an entry-level understanding of Splunk. The exam covers topics such as Splunk basics, searching, fields, the search language, transformations, reports, dashboards, lookups, and scheduled reports/alerts. Candidates are encouraged to review Splunk documentation, videos, and their own experience to prepare. There are no prerequisites for this exam.

Uploaded by

Raghad Jamil
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
234 views

Splunk Test Blueprint User

The Splunk Core Certified User exam is a 60 question, 60 minute exam that certifies an entry-level understanding of Splunk. The exam covers topics such as Splunk basics, searching, fields, the search language, transformations, reports, dashboards, lookups, and scheduled reports/alerts. Candidates are encouraged to review Splunk documentation, videos, and their own experience to prepare. There are no prerequisites for this exam.

Uploaded by

Raghad Jamil
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

Splunk Core Certified User

The Splunk Core Certified User exam is the final step towards
completion of the Splunk Core Certified User certification.

60 Questions Entry-Level 60* Minutes


*Total exam time includes 3 minutes to review the exam agreement.

Exam Content
The following topics are general guidelines for the content likely to be included on the
exam; however, other related topics may also appear on any specific delivery of the
exam. In order to better reflect the contents of the exam and for clarity purposes, the
guidelines below may change at any time without notice.

1.0 Splunk Basics 5%


1.1 Splunk components
1.2 Understand the uses of Splunk
1.3 Define Splunk apps
1.4 Customizing user settings
1.5 Basic navigation in Splunk

2.0 Basic Searching 22%


2.1 Run basic searches
2.2 Set the time range of a search
2.3 Identify the contents of search results
2.4 Refine searches
2.5 Use the timeline
2.6 Work with events
2.7 Control a search job
2.8 Save search results

1
3.0 Using Fields in Searches 20%
3.1 Understand fields
3.2 Use fields in searches
3.3 Use the fields sidebar

4.0 Search Language Fundamentals 15%


4.1 Review basic search commands and general search practices
4.2 Examine the search pipeline
4.3 Specify indexes in searches
4.4 Use the following commands to perform searches: tables, rename,
fields, dedup, and sort

5.0 Using Basic Transforming Commands 15%


5.1 The top command
5.2 The rare command
5.3 The stats command

6.0 Creating Reports and Dashboards 12%


6.1 Save a search as a report
6.2 Edit reports
6.3 Create reports that display statistics (tables)
6.4 Create reports that display visualizations (charts)
6.5 Create a dashboard
6.6 Add a report to a dashboard
6.7 Edit a dashboard

7.0 Creating and Using Lookups 6%


7.1 Describe lookups
7.2 Examine a lookup file example
7.3 Create a lookup file and create a lookup definition

2
7.4 Configure an automatic lookup
7.5 Use the lookup in searches

8.0 Creating Scheduled Reports and Alerts 5%


8.1 Describe scheduled reports
8.2 Configure scheduled reports
8.3 Describe alerts
8.4 Create alerts
8.5 View fired alerts

Exam Preparation
Candidates may reference the Splunk How-To YouTube Channel, Splunk Docs, and
draw from their own Splunk experience.

The following is a suggested and non-exhaustive list of training from the Core
Certified User Learning Path that may cover topics listed in the above blueprint:

Intro to Splunk
Using Fields
Scheduling Reports and Alerts
Visualizations
Working with Time
Statistical Processing
Leveraging Lookups and Subsearches
Search Optimization

There are no prerequisite exams for this certification.

Schedule this exam >

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy