Splunk Enterprise Certified Architect - Ingeniq Splunk Training
This certification track prepares Splunk Partners and Customers to participate in the Architect Certification Exam and become Splunk Certified Architects.
17138
page-template-default,page,page-id-17138,page-child,parent-pageid-13133,ajax_fade,page_not_loaded,,qode-theme-ver-1.5,wpb-js-composer js-comp-ver-4.3.5,vc_responsive

Splunk Core Certified Consultant

A Splunk Core Certified Consultant has a thorough understanding of Splunk Deployment Methodology and implementation in large Splunk installations and has expert-level knowledge of multi-tier Splunk architectures, clustering, and scalability topics.

This certification demonstrates a Consultant’s ability to properly size, install, and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs.

You can download the Splunk Certification Candidate Handbook to learn more about the changes.

You can download the Frequently Asked Questions on Splunk Core Certified Consultant to learn more about the Certification.

Learning Path

Click on a course below to view a course description, class schedules, and register.

Splunk Fundamentals 1

This self-paced course teaches you how to search and navigate in Splunk, use fields, get statics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk’s datasets features and Pivot interface.

Certification Exam - Splunk Core Certified User

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Splunk Fundamentals 2

This 4 virtual-day course focuses on additional SPL commands, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the CIM.

Certification Exam - Splunk Core Certified Power User

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Splunk Fundamentals 3

This course runs over 4 days and focuses on additional search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, accelerating reports and data models.

Creating Dashboards with Splunk

This two-day course is designed for power users who want to create fast and efficient views that include customized charts, drilldowns, advanced behaviors and visualizations. Major topics include using tokens, global searches, event handlers, dynamic drilldowns and simple XML extensions for JavaScript and CSS.

Advanced Searching and Reporting

This 18 hour course focuses on more advanced search and reporting commands. Scenario-based examples and hands-on challenges enable users to create robust searches, reports, and charts. Students are coached step by step through complex searches to produce final results. Major topics include the Splunk search process, using sub-searches, additional statistical commands and functions, formatting and calculating results, charting commands and options, correlating events, creating advanced lookup, and using DB Connect.

Splunk Enterprise System Administration

This virtual 9 hour course (9am to 1.30pm over 2 days) is designed for system administrators who are responsible for managing the Splunk Enterprise environment. The course provides the fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management, and monitoring core Splunk Enterprise components.

Splunk Enterprise Data Administration

This virtual 13.5 hour course (9am to 1.30pm over 3 days) is designed for system administrators who are responsible for getting data into Splunk Indexers. The course provides the fundamental knowledge of Splunk forwarders and methods to get remote data into Splunk indexers. It covers installation, configuration, management, monitoring, and troubleshooting of Splunk forwarders and Splunk Deployment Server components.

Splunk Enablement Content
  • Distributed Search Migration Lab
  • Indexer Cluster Lab
Certification Exam - Splunk Enterprise Certified Admin

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Architecting Enterprise Deployments

This 12 hour course focuses on large enterprise deployments. Students will learn steps and best practices for planning, data collection, sizing and documenting a distributed deployment. Workshop-style labs offer students an opportunity to design a deployment based on a common distributed use case.

Troubleshooting Splunk

This 2-virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise 6.6.

Splunk Cluster Administration

This 12 hour course is for advanced Splunk administrators. The course provides the fundamental knowledge of deploying and managing a Splunk cluster environment. It covers installation, configuration, management,  monitoring, and troubleshooting of Splunk clusters.

Splunk Enterprise Practical Lab
Certification Exam - Splunk Enterprise Certified Architect

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Splunk Practical Lab Course

This 24-hour practical lab course is designed to assess the skills and knowledge of Splunk Core Certified Consultant candidates.

  • Indexer Cluster Implementation Lab*
  • Distributed Search Migration Lab*
  • Implementation Fundamentals Lab*
  • Architect 1-3 Implementation Lab*
* These labs are currently only available to Splunk employees and Splunk Partners.

This 24-hour practical lab exercise is designed to take you through the tasks of a complete mock deployment. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices.

Core Implementation Instructor led Course

Splunk Enablement Live Instructor-led Class (developed and designed by the Splunk Services team). See Splunk Learning or Splunk Partner Learning for registration).

Questions can be addressed to Splunk Accredited Core Implementation.

In this course you will learn;

  • Set up large clustered Splunk environments from scratch using best practices
  • Onboard numerous data sources correctly
  • Work with the customer to deliver dashboards and alerts that provide them value
Certification Exam - Splunk Core Certified Consultant

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.