Splunk Core Certified Power User

Course Description

A Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions and data models, and normalize data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms. This certification demonstrates an individual’s foundational competence in Splunk’s core software.

Program Objectives

• Transforming commands and visualizations
• Filtering and formatting results
• Correlating events
• Knowledge objects
• Fields (field aliases, field extractions, calculated fields)
• Tags and event types
• Macros
• Workflow actions
• Data models
• Splunk Common Information Model (CIM)

Prerequisites

The prerequisites listed below (including both coursework and Splunk Core Certified User exam) are highly recommended, but not required for candidates to register for the certification exam.

• Splunk Fundamentals 1
• Splunk Fundamentals 2