OpenExamsFREE PRACTICE — ANY EXAM

Splunk Core Certified Power User Exam — Information & Free Practice

US · Examination information

200 free questions · Answer explanations · No signup required

Start free practice →

Splunk Core Certified Power User Exam

Provider
Pearson VUE
Format
Multiple choice; closed book; test center or online proctored delivery
Exam questions
Total questions: 65.
Time limit
60 minutes, including 3 minutes to review the exam agreement
Exam fee
$130 USD per attempt
Examination outline
  • Using Transforming Commands for Visualizations (5%)
    • Use the chart command
    • Use the timechart command
  • Filtering and Formatting Results (10%)
    • The eval command
    • Use the search and where commands to filter results
    • The fillnull command
  • Correlating Events (15%)
    • Identify transactions
    • Group events using fields
    • Group events using fields and time
    • Search with transactions
    • Report on transactions
    • Determine when to use transactions vs. stats
  • Creating and Managing Fields (10%)
    • Perform regex field extractions using the Field Extractor (FX)
    • Perform delimiter field extractions using the FX
  • Creating Field Aliases and Calculated Fields (10%)
    • Describe, create, and use field aliases
    • Describe, create, and use calculated fields
  • Creating Tags and Event Types (10%)
    • Create and use tags
    • Describe event types and their uses
    • Create an event type
  • Creating and Using Macros (10%)
    • Describe macros
    • Create and use a basic macro
    • Define arguments and variables for a macro
    • Add and use arguments with a macro
  • Creating and Using Workflow Actions (10%)
    • Describe the function of GET, POST, and Search workflow actions
    • Create a GET workflow action
    • Create a POST workflow action
    • Create a Search workflow action
  • Creating Data Models (10%)
    • Describe the relationship between data models and pivot
    • Identify data model attributes
    • Create a data model
  • Using the Common Information Model (CIM) Add-On (10%)
    • Describe the Splunk CIM
    • List the knowledge objects included with the Splunk CIM Add-On
    • Use the CIM Add-On to normalize data
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.