Skip to main content

Splunk Training + Certification

Splunk SOAR Certified Automation Developer

Track Overview

Splunk SOAR Certified Automation Developer* installs, configures, and uses SOAR (formerly Phantom) servers and plans, designs, creates, and debugs basic playbooks for SOAR. These highly skilled individuals are proficient in complex SOAR solution development, and can integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage. This certification demonstrates an individual's knowledge and skills in installing and configuring a SOAR server and integrating it with Splunk, as well as planning, designing, creating, and debugging playbooks.

*Formerly referred to as Splunk Phantom Certified Admin

Prerequisite Certification(s):

  • None

Prerequisite Course(s):

  • None

Candidates who wish to prepare for the Splunk SOAR Certified Automation Developer exam are recommended to complete the following courses (names have been changed):

  • Investigating Splunk Incidents with SOAR
  • Administering SOAR
  • Developing SOAR Playbooks
  • Advanced SOAR Implementation

Candidates for the Splunk SOAR Certified Automation Developer exam are also expected to having working knowledge and experience as either Splunk Cloud or Splunk Enterprise Administrators.

Certification Exam
Certification Exam

Candidates who have completed all of the above requirements may register for the Certification exam via testing partner Pearson VUE. Those who need step-by-step registration assistance should refer to our Exam Registration Tutorial.

The Splunk Certification Exams Study Guide contains important details regarding exam preparation and delivery.

Good luck!