Splunk Enterprise Certified Architect

Are you a visual learner? Download the certification track flowchart here.

A Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. This certification demonstrates an individual's ability to deploy, manage, and troubleshoot complex Splunk Enterprise environments.

The prerequisite courses listed below through Data and System Administration are highly recommended, but not required for candidates to register for the certification exam.

All candidates who wish to access the exam must be Splunk Enterprise Certified Admin and complete the Architecting Splunk Enterprise Deployments, Troubleshooting Splunk Enterprise, Cluster Administration, and Splunk Enterprise Deployment Practical Lab courses.

  

Splunk Fundamentals 1

This self-paced course teaches you how to search and navigate in Splunk, use fields, get statics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk's datasets features and Pivot interface.
 

Certification Exam

Splunk Core Certified User is a recommended entry-level exam. We encourage all candidates to become Splunk Core Certified Users as their first step in our certification program, though it is not required.

Please see our Exam Registration Tutorial and Certification FAQ for additional assistance!
 

Splunk Fundamentals 2

This 4 virtual-day course focuses on additional SPL commands, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the CIM. 

Certification Exam

Splunk Core Certified Power User is a mandatory prerequisite to Splunk Enterprise Certified Architect. All candidates must complete the Power User exam before proceeding.

Please see our Exam Registration Tutorial and Certification FAQ for additional assistance!
 

Splunk Enterprise System Administration

This 2 virtual day course is designed for system administrators who manage a Splunk Enterprise environment. Topics include Splunk license manager, indexers and search heads, configuration, management, and monitoring. 

Splunk Enterprise Data Administration

This 3 virtual day course is for data administrators who are responsible for getting data into Splunk. The course provides content about Splunk forwarders and methods to get remote data into Splunk. 

Certification Exam

Splunk Enterprise Certified Admin is a mandatory prerequisite to Splunk Enterprise Certified Architect. All candidates must complete the Admin exam before proceeding.

Please see our Exam Registration Tutorial and Certification FAQ for additional assistance!
 

Troubleshooting Splunk Enterprise

This 2 virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise. 

Splunk Enterprise Cluster Administration

This 3 virtual day course is for advanced Splunk administrators and covers deployment and management of Splunk indexer clusters and search head clusters. 

Architecting Splunk Enterprise Deployments

This 2 virtual day course focuses on large enterprise deployments. Learn best practices for planning, data collection, sizing and documenting a distributed deployment.  

Splunk Deployment Practical Lab

This 24-hour practical lab course is designed to assess the skills and knowledge of Splunk Certified Architect candidates.
 

Certification Exam

It's time to put your knowledge to the test.

Our Exam Registration Tutorial will guide you through the registration process and the Splunk Certification Exams Study Guide will guide your study efforts.

Good luck!