Skip to main content

Training and Certification FAQ

Get answers to your most pressing Splunk Training and Certification questions.

Contact us:

  • Certification and Exam questions:
  • Training questions:


Find out more about our offerings and exams

When you register for your first exam, you will need to connect your Splunk account to your new Pearson VUE account. Once your accounts are connected, you will receive exam authorizations via email. Use your Splunk ID in the email (not your user name. It will look like PV-12345678). Once you have a Pearson VUE account, you can register here for an exam at a Pearson VUE facility near you or in your home or office via an online proctor. 

You can purchase an exam voucher in three ways:

  1. Buy directly from Pearson VUE when you register. You can also buy vouchers at the Pearson VUE voucher store for a multi-exam discount (5 for $500).
  2. Convert existing company-held EDU training units for use as exam registrations.

You must contact Pearson VUE or access your Pearson VUE account online to reschedule or cancel at least 48 hours prior to your appointment. Exams cannot be rescheduled or canceled less than 48 hours from the time of your appointment. Failure to reschedule or cancel in time or show up for the exam will forfeit your exam fee.

The Pearson VUE platform requires that you have a unique account for each certification program you would like to participate in. You will need to connect your Pearson VUE and Splunk accounts when you register for your first exam. To update other account information, you will need to contact the Splunk Certification team for assistance.

No. You can manage and share all of your badges through Credly with one Credly account.


Learn about signing up for Splunk courses

Help for STEP, including registering, attending, and cancelling training, can be found on our STEP Assistance page or you can send an email to

Note that if you need assistance with creating your account or logging in please call Splunk Support at (1.855) SPLUNK.S or (1.855) 775.8657 Not in the US? Find your local office (scroll to the bottom of the page).

Start by choosing a learning path or certification track that fits you. Click on View Topics & Register to see the description and then View Schedule.

Pay for the course by credit card or with existing Training Units. Contact your Splunk account manager for help with existing training units.

Select self-paced eLearning, in-person or a virtual class format you prefer. Add to your cart and proceed to checkout.

You can access the course from the confirmation email sent to the email address used to create your Splunk Education account. 

Or, go to your Splunk Training Profile. You will see courses you are registered for at the bottom of the page. You can also click the My Learning tab. Then filter results by course status. When you find the course you want, click the View Details button.

Start your course from the confirmation email or directly from your Splunk Education account.

Go to your Splunk Training Profile. You will see courses you are registered for at the bottom of the page. Or, click the My Learning tab and filter results by course status. When you find the course, click the Launch or Re-Launch button.

Remember, access to eLearning classes lasts for 12 months.

You can self-cancel from your STEP Plan. Cancellations must be done at least 7 days prior to class start. If you fail to cancel in time and/or do not attend the class, no refund will be issued, and you will be charged the full amount.

If you have any questions, please contact us at

Vouchers and training units typically expire one year from the date of issue. Education training units can be used for all education offerings, delivery methods and certification exams. Special training units cannot be converted to certification vouchers. All training unitsts can be used by anyone within your organization. Contact Splunk Education to purchase training unit extensions.

Certification vouchers can only be purchased with Education training credits during the first year. Once converted, one voucher code is good for one exam attempt. Codes are non-refundable and cannot be transferred into education credits.


Explore the latest Splunk Education policies

During your certification exam, you will have three minutes to read and accept the Splunk Certification Agreement. We recommend reviewing the agreement prior to taking your exam, as it outlines the expected code of conduct, requirements, and termination details. If you do not accept the agreement, your exam session will be terminated.

All Splunk certifications have a three-year life cycle from the date of the highest certification exam passed.

If you have not completed the recertification requirements by the expiration date of your badge, your certification will be marked inactive. If you let certifications lapse, you will need to restart the program at the Splunk Core Certified Power User level.

Class sessions may be canceled or rescheduled at our discretion. If you are in a class which is canceled, you will be notified in advance, and you will be offered an alternative registration.

If you have a disability or a medical condition, you are eligible for a testing accommodation.

You must submit a request for accommodation at least 30 days before your initial exam attempt. Accommodations are not available for online-proctored exam appointments and cannot be applied to existing exam appointments or retake attempts unless they were approved for the initial attempt.

If you don’t pass an exam on your first attempt, you will need to wait seven days to retake the exam. If additional retakes are needed, the wait time is longer to ensure adequate time for review and preparation. Splunk reserves the right to deny a retake beyond the sixth attempt.


Get the latest Splunk Training and Certification content

"" ""

See our latest videos

Visit Our Channel
"" ""

Connect with us on LinkedIn

Follow Us
"" ""

Learn more in our newsletter

Subscribe Today

Get started

Deepen your knowledge and turn data into doing with Splunk.