Exam objectives
Core Certified UserSplunk Core Certified User exam objectives
The published blueprint is the contract: the exam can only test what is on this list. Domains carry their official weightings, and objectives with a practice page link straight to questions written for that objective.
Titles and weightings from the official objectives. Splunk exam page ↗
Splunk Basics
5%of exam1.1 Splunk componentsIn the bank
1.2 Understand the uses of SplunkIn the bank
1.3 Define Splunk appsIn the bank
1.4 Customizing user settingsIn the bank
1.5 Basic navigation in SplunkIn the bank
Basic Searching
22%of examUsing Fields in Searches
20%of examSearch Language Fundamentals
15%of examUsing Basic Transforming Commands
15%of examCreating Reports and Dashboards
12%of exam6.1 Save a search as a reportIn the bank
- 6.2 Edit reportsPractice
6.3 Create reports that display statistics (tables)In the bank
6.4 Create reports that display visualizations (charts)In the bank
6.5 Create a dashboardIn the bank
6.6 Add a report to a dashboardIn the bank
6.7 Edit a dashboardIn the bank
Creating and Using Lookups
6%of exam7.1 Describe lookupsIn the bank
7.2 Examine a lookup file exampleIn the bank
7.3 Create a lookup file and create a lookup definitionIn the bank
7.4 Configure an automatic lookupIn the bank
7.5 Use the lookup in searchesIn the bank
Creating Scheduled Reports and Alerts
5%of exam8.1 Describe scheduled reportsIn the bank
8.2 Configure scheduled reportsIn the bank
8.3 Describe alertsIn the bank
8.4 Create alertsIn the bank
8.5 View fired alertsIn the bank
Objectives marked Practice open a page of original questions written for that objective, each with a full explanation cited to Splunk documentation.
Keep reading
Core Certified User practice questions
Free sample questions with the full explanation on every answer.
Free Core Certified User practice test
Ten real questions, playable now. No account, no card.
Core Certified User passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is Core Certified User?
An honest difficulty read from the format, the clock and the weights.