Course Overview
A Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions and data models, and normalize data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms. This certification demonstrates an individual's foundational competence of Splunk’s core software.
A Splunk Cloud Certified Admin manages and configures details for Splunk Cloud, including data inputs and forwarder configuration, data management, user accounts, and basic monitoring and problem isolation. This certification demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Cloud environment.
This Learning Path is usually delivered over a period of 4 weeks, but students can choose to schedule their modules in an alternative timeline.
Who should attend
Candidates who wish to prepare for the Splunk Cloud Certified Admin exam and who have not yet completed the prerequisite Splunk Core Certified Power User exam.
Prerequisites
To prepare for any Splunk Certification-Based Learning Path, students should complete these free introductory e-learning modules:
- Intro to Splunk (ITS)
- Using Fields (Free) (SUFF) OR Using Fields (SUF) (fee required; includes hands-on labs)
And before starting this Fast Track, students should complete these free e-learning modules:
Course Content
This Learning Path contains the following modules:
- Statistical Processing (SSP)
- Working with Time (WWT)
- Comparing Values (SCV)
- Result Modification (SRM)
- Correlation Analysis (SCLAS)
- Search Under the Hood (SUH) e-learning
- Intro to Knowledge Objects (IKO) e-learning
- Creating Knowledge Objects (CKO)
- Creating Field Extractions (CFE)
- Data Models (SDM)
- Using Choropleth (SUC)
We suggest candidates looking to prepare for this exam complete either the Splunk Cloud Administration or the Transitioning to Splunk Cloud module.
Both modules will equally prepare candidates for the exam, but are tailored to meet the needs of the individual based on prior Splunk experience.
Splunk Cloud Administration (SCA) is designed for net-new administrators working in a Splunk Cloud environment. Transitioning to Splunk Cloud (TSC) is for experienced
Enterprise administrators looking to maximize their success in migrating to a Cloud environment.
As an experienced Enterprise administrator you will be enrolled in: