Splunk Core Certified User (SPLK-1001) FAQ
A Splunk Core Certified User is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This entry-level certification exam evaluates a candidate’s knowledge and skills to navigate and use Splunk software.
Here are some Frequently Asked Questions to provide you clarity about the exam policies.
What is Splunk Core Certified User Exam?
Splunk Core Certified User (SPLK-1001) exam is the final step towards completion of the Splunk Core Certified User certification. This optional entry-level certification demonstrates an individual’s basic ability to navigate and use Splunk software.
What are the Prerequisite for the exam?
Candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the Splunk Fundamentals 1 course in order to be prepared for the certification exam.
How many questions are there in the Splunk Core Certified User Exam ?
There are a total of 65 questions in the exam.
What is the Course Structure for the exam?
This exam covers the following 8 domains:
- Firstly, Splunk Basics – 5%
- Secondly, Basic Searching – 22%
- Thirdly, Using Fields in Searches – 20%
- Also, Search Language Fundamentals – 15%
- Then, Using Basic Transforming Commands – 15%
- Further, Creating Reports and Dashboards – 12%
- Moreover, Creating and Using Lookups – 6%
- Lastly, Creating Scheduled Reports and alerts – 5%
What is the time duration of the exam?
The total time given for the exam is 57-minutes
In what all languages can I take the Splunk Core Certified User Exam ?
The exam is available in English language only.
What is the Exam fee?
The exam fee is $125 USD.
How can the exam be taken?
The splunk certification exams is offered in either of the following ways-
- Firstly, In-person at a Pearson Test Center.
- Or at home via online proctoring
I already have an account with Pearson VUE. Do I need to make a new one?
Yes. The Pearson VUE platform requires that candidates have a unique account for each certification program in which they’d like to participate.
What is the exam retake policy?
If you are not able to pass the exam in the first attempt Splunk offers you to take the exam again. You must wait 7 days to retake the exam.
Do I need to pay additional fee in order to retake the exam?
The re-take fee for the exam is $125.
Is it possible to retake previously passed exam?
Candidates will not be permitted to retake any exam they have previously passed, unless directly related to a recertification requirement approved by Splunk.
Can I reschedule my exam ?
All scheduled exams are subject to a minimum 24 hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.
For how long is the Splunk Core Certified User Certification valid?
The certification is valid for a period of 3 years.
When will I receive my results for the Splunk Core Certified User?
Immediately after submitting the exam, the candidate’s results (pass or fail) will be displayed. For candidates testing onsite, a printout of these results will be provided by the on site proctor.
How are the exam scores are calculated?
After the completion of your exam, the points you earned on each question are totalled and then compared with the cut score to determine whether the result is pass or fail.