Courses for Admin Certification

A Splunk Admin supports the day-to-day administration and health of a Splunk installation. This certification track prepares Splunk Partners and Customers to become Splunk Certified Admins. In addition to attending the listed classes that include lecture and hands-on labs, participants take part in two online exams. This path includes the Splunk Certified Power User program, which is a prerequisite to becoming a Splunk Certified Admin.

Notice: The following courses; Using Splunk, Searching and Reporting with Splunk, Creating Splunk Knowledge Objects, and Splunk Infrastructure Overview are now replaced with Splunk Fundamentals 1 and Splunk Fundamentals 2 (see new learning path below). You can still register for the legacy courses for a very limited time. Use the links in this text to view more information about the legacy courses and register.

Click on a course below to view a full course description, class schedules, and register.

Splunk Fundamentals 1
This self-paced course teaches you how to search and navigate in Splunk, use fields, get statics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk's datasets features and Pivot interface.
View topics and register ››

Online Test

Once you've successfully attended and passed Splunk Fundamentals 1, you are eligible to take the Splunk Certified User online test. Contact Splunk Certification to register for the test.

Splunk Fundamentals 2This four-virtual-day course focuses on additional SPL commands, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the CIM.
View topics and register ››

Online Test

Once you've successfully attended and passed Splunk Fundamentals 2, you are eligible to take the Splunk Certified Power User online test. Contact Splunk Certification to register for the test.

Splunk Enterprise
System Administration
This 2 virtual day course is designed for system administrators who manage a Splunk Enterprise environment. Topics include Splunk license manager, indexers and search heads, configuration, management, and monitoring.
View topics and register ››
Splunk Enterprise
Data Administration
This 3 virtual day course is for data administrators who are responsible for getting data into Splunk. The course provides content about Splunk forwarders and methods to get remote data into Splunk.
View topics and register ››

Online Test

Once you've successfully attended and passed the Splunk Administration course, you are eligible to take the Splunk Certified Admin online test. Contact Splunk Certification to register for the test.