Splunk Enterprise Certified Architect - Ingeniq Splunk Training
This certification track prepares Splunk Partners and Customers to participate in the Architect Certification Exam and become Splunk Certified Architects.
16536
page-template-default,page,page-id-16536,page-child,parent-pageid-13133,ajax_fade,page_not_loaded,,qode-theme-ver-1.5,wpb-js-composer js-comp-ver-4.3.5,vc_responsive

Splunk Enterprise Certified Architect

A Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. This certification demonstrates an individual’s ability to deploy, manage, and troubleshoot complex Splunk Enterprise environments.

Learning Path

Click on a course below to view a course description, class schedules, and register.

Splunk Fundamentals 1

This self-paced course teaches you how to search and navigate in Splunk, use fields, get statics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk’s datasets features and Pivot interface.

Certification Exam

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Splunk Fundamentals 2

This 4 virtual-day course focuses on additional SPL commands, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the CIM.

Certification Exam

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Splunk Enterprise System Administration

This virtual 9 hour course (9am to 1.30pm over 2 days) is designed for system administrators who are responsible for managing the Splunk Enterprise environment. The course provides the fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management, and monitoring core Splunk Enterprise components.

Splunk Enterprise Data Administration

This virtual 13.5 hour course (9am to 1.30pm over 3 days) is designed for system administrators who are responsible for getting data into Splunk Indexers. The course provides the fundamental knowledge of Splunk forwarders and methods to get remote data into Splunk indexers. It covers installation, configuration, management, monitoring, and troubleshooting of Splunk forwarders and Splunk Deployment Server components.

Certification Exam

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.

Architecting Enterprise Deployments

This 12 hour course focuses on large enterprise deployments. Students will learn steps and best practices for planning, data collection, sizing and documenting a distributed deployment. Workshop-style labs offer students an opportunity to design a deployment based on a common distributed use case.

Troubleshooting Splunk Enterprise

This 2 virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise.

Splunk Enterprise Cluster Administration

This 3 virtual day course is for advanced Splunk administrators and covers the deployment and management of Splunk indexer clusters and search head clusters.

Splunk Deployment Practical Lab

This 24-hour practical lab course is designed to assess the skills and knowledge of Splunk Certified Architect candidates.

This 24-hour practical lab exercise is designed to take you through the tasks of a complete mock deployment. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices.

Course Prerequisites

  • Splunk Fundamentals 1
  • Splunk Fundamentals 2
  • Splunk Data Administration
  • Splunk System Administration
  • Architecting Splunk Enterprise Deployments
  • Troubleshooting Splunk Enterprise
  • Splunk Enterprise Cluster Administration

Course Format

Instructor-led lecture with labs, delivered via virtual classroom or at your site.

Course Objectives

  • Installation and Infrastructure
    • Install forwarders, indexers, search head, deployment server and license master
  • Configuration and Collection
    • Under Configure an index cluster
    • Deploy all specified configurations via deployment server
    • Configure inputs from forwarders
    • Configure and confirm index-time knowledge
    • Create a search time field
  • Searching and Reporting
    • Create searches for each required use case
    • Get indexer event acknowledgments

You can access the lab using the following link;

https://www.splunk.com/en_us/training/courses/splunk-architect-certification-lab.html

Certification Exam

How to register for your exam

There are three ways to purchase a PearsonVUE registration voucher:

1) Directly from PearsonVUE

This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk

Payment will be collected at the time of registration.

2) From Splunk (as an individual) *COMING SOON*

Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice.

3) From Splunk (as an account)

Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk

All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.