Splunk Enterprise Security Certified Admin (SESCA)

A Splunk Enterprise Security Certified Admin manages a Splunk Enterprise Security environment, including ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customizations. This certification demonstrates an individual's ability to install, configure, and manage a Splunk Enterprise Security deployment.

Exams and recommended training

Splunk Enterprise Security Certified Admin Exam

Next steps

Splunk SOAR Certified Automation Developer