From entry-level to technical wizard, Splunk Certification has something for everyone.
Our certification program paired with our Splunk Education Learning Paths train candidates for their current role or for the role they seek as an industry professional to better serve their organization or to become a highly skilled, standout applicant in today’s competitive job market.
Certification is a critical and valuable component to growing your Splunk practice and demonstrating your Splunk technical acumen. A Splunk certification is your key differentiator in the marketplace. Splunk certifications provide professional learning paths to help guide you through the training process in a structured and meaningful way.
Splunk Certification Tracks
We recommend all candidates begin with our Splunk Core tracks, which contain knowledge and skills applicable to both Enterprise and Cloud customers.
For candidates to earn certifications with maximum efficiency, and to simplify the training process, we have designed Certification-Based Learning Paths for each. We also offer Fast Tracks for select certifications. Fast Tracks are bundles which enable candidates to complete all prerequisite certifications on the way to their goal certification.
Click on a certification or Learning Path to learn more.
SPLUNK CORE CERTIFIED USER
A Splunk Core Certified User is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This foundational, entry-level certification demonstrates an individual's basic ability to navigate and use Splunk software.
SPLUNK CORE CERTIFIED POWER USER
A Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions and data models, and normalize data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms. This foundational, entry-level certification demonstrates an individual's foundational competence of Splunk’s core software.
SPLUNK CORE CERTIFIED ADVANCED POWER USER
A Splunk Core Certified Advanced Power User has greater depth of knowledge and skills in complex searching and reporting commands, advanced use cases of knowledge objects, and best practices for building dashboards and forms. This certification demonstrates an individual’s ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data.
SPLUNK CLOUD CERTIFIED ADMIN
A Splunk Cloud Certified Admin manages and configures details for Splunk Cloud, including data inputs and forwarder configuration, data management, user accounts, and basic monitoring and problem isolation. This certification demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Cloud environment.
SPLUNK ENTERPRISE CERTIFIED ADMIN
A Splunk Enterprise Certified Admin manages various components of Splunk Enterprise on a daily basis, including license management, indexers and search heads, configuration, monitoring, and getting data into Splunk. This foundational, moderate-level certification, designed for Enterprise administrators, demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Enterprise environment
SPLUNK ENTERPRISE CERTIFIED ARCHITECT
A Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering.
SPLUNK CORE CERTIFIED CONSULTANT
A Splunk Core Certified Consultant has a thorough understanding of Splunk Deployment Methodology and implementation in large Splunk installations and has expert-level knowledge of multi-tier Splunk architectures, clustering, and scalability topics. This certification demonstrates a Consultant's ability to properly size, install, and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs.
SPLUNK ENTERPRISE SECURITY CERTIFIED ADMIN
A Splunk Certified Enterprise Security Admin manages a Splunk Enterprise Security environment, including ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customizations.
SPLUNK IT SERVICE INTELLIGENCE CERTIFIED ADMIN
A Splunk IT Service Intelligence Certified Admin is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This foundational, entry-level certification demonstrates an individual's basic ability to navigate and use Splunk software.
SPLUNK SOAR CERTIFIED AUTOMATION DEVELOPER
A Splunk SOAR Certified Automation Developer installs, configures, and uses SOAR servers and plans, designs, creates, and debugs basic playbooks for Splunk SOAR. These highly skilled individuals are proficient in complex SOAR solution development, and can integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage.
SPLUNK O11y CLOUD CERTIFIED METRICS USER
A Splunk O11y Cloud Certified Metric User monitors and visualizes metrics using Splunk Observability Cloud. These individuals deploy and configure the OpenTelemetry Collector to send in metrics, and sets up alerts to monitor development environments in real time.
SPLUNK CERTIFIED CYBERSECURITY DEFENSE ANALYST
A Splunk Certified Cybersecurity Defense Analyst demonstrates knowledge critical to detecting, analyzing and combating cyber threats. These individuals help protect businesses and mitigate risk, while managing vulnerabilities and threats using common types of cyber defense systems.