Exam objectives
Core Certified Power UserSplunk Core Certified Power User exam objectives
The published blueprint is the contract: the exam can only test what is on this list. Domains carry their official weightings, and objectives with a practice page link straight to questions written for that objective.
Titles and weightings from the official objectives. Splunk exam page ↗
Using Transforming Commands for Visualizations
5%of examFiltering and Formatting Results
10%of examCorrelating Events
15%of examCreating and Managing Fields
10%of examCreating Field Aliases and Calculated Fields
10%of examCreating Tags and Event Types
10%of examCreating and Using Macros
10%of exam- 7.1 Describe macrosPractice
- 7.2 Create and use a basic macroPractice
- 7.3 Define arguments and variables for a macroPractice
7.4 Add and use arguments with a macroIn the bank
Creating and Using Workflow Actions
10%of exam- 8.1 Describe the function of GET, POST, and Search workflow actionsPractice
- 8.2 Create a GET workflow actionPractice
8.3 Create a POST workflow actionIn the bank
8.4 Create a Search workflow actionIn the bank
Creating Data Models
10%of examUsing the Common Information Model (CIM) Add-On
10%of examObjectives marked Practice open a page of original questions written for that objective, each with a full explanation cited to Splunk documentation.
Keep reading
Core Certified Power User practice questions
Free sample questions with the full explanation on every answer.
Free Core Certified Power User practice test
Ten real questions, playable now. No account, no card.
Core Certified Power User passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is Core Certified Power User?
An honest difficulty read from the format, the clock and the weights.