OpenExamsFREE PRACTICE — ANY EXAM

Splunk Core Certified Power User — Requirements & Free Practice

US · License preparation

200 free questions · Answer explanations · No signup required

Loading selected examination banks…

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

Splunk Core Certified Power User

This entry-level certification demonstrates an individual's foundational competence of Splunk’s core software.

Licensing authority: Cisco Systems, Inc. · Application information

Initial by examination
Splunk Core Certified Power User Exam
Agreements
Candidates must accept the certification agreement and Pearson candidate rules; the handbook also requires agreement to the facial-recognition policy for online-portal appointment scheduling. Allotted examination time includes three minutes for agreement review.
Applicability
Current certification catalogue, current track page and its linked blueprint, and current v.10.20.26 handbook were checked at evaluationDate 2026-10-27. No exam effective or retirement date was published in those materials or the current integration announcement; no effective date is inferred from retrieval, handbook version label or registration migration.
Candidate Eligibility
The handbook requires a current Splunk.com account/email and a Cisco Certmetrics account with the candidate's legal name matching photo ID. The migration FAQ removes the separate Splunk ID requirement for registration; it does not state that the general Splunk.com account/email requirement is removed. Candidates must be at least 18, or ages 13-17 with signed parental permission; under-13 candidates are ineligible under the certification agreement. Valid photo ID and a second ID are required.
Delivery
Pearson VUE test center or online proctoring, closed book. Online candidates must pass the system test on the same computer and at the same location before exam day; administrative rights are required. Scheduling is subject to available appointments and the delivery provider's requirements; no particular seat within November 25, 2026-February 28, 2027 is guaranteed.
Fees And Changes
$130 USD per attempt; five registration vouchers cost $500 USD. Vouchers expire approximately one year from issue and exams must occur by voucher expiry. At least 48 hours is required for cancellation or rescheduling to avoid fee forfeiture.
Prerequisites
No prerequisite certifications, examinations or courses. Training listed in the track and blueprint is suggested preparation; no mandatory training, school arrangement, laboratory examination or writing component is specified for this route.
Registration
New registrations since October 20, 2026 use Cisco's certification tracking system. Previously booked Splunk appointments are honored through March 1, 2027. Active vouchers remain usable through Cisco subject to their own expiration dates; this is not an exam-version end date.
Results
Passing the examination is required. Immediate pass/fail reporting is subject to the agreement's official-score accuracy and integrity review. The individual certification lifecycle is three years from the highest-level award and is not an expiration date of the examination version.
Scope
Initial individual Power User certification through the one English knowledge examination; no national or state professional practice licence is asserted.

Splunk Core Certified Power User Exam

Provider
Pearson VUE
Format
Multiple choice; closed book; test center or online proctored delivery
Exam questions
Total questions: 65.
Time limit
60 minutes, including 3 minutes to review the exam agreement
Exam fee
$130 USD per attempt
Examination outline
  • Using Transforming Commands for Visualizations (5%)
    • Use the chart command
    • Use the timechart command
  • Filtering and Formatting Results (10%)
    • The eval command
    • Use the search and where commands to filter results
    • The fillnull command
  • Correlating Events (15%)
    • Identify transactions
    • Group events using fields
    • Group events using fields and time
    • Search with transactions
    • Report on transactions
    • Determine when to use transactions vs. stats
  • Creating and Managing Fields (10%)
    • Perform regex field extractions using the Field Extractor (FX)
    • Perform delimiter field extractions using the FX
  • Creating Field Aliases and Calculated Fields (10%)
    • Describe, create, and use field aliases
    • Describe, create, and use calculated fields
  • Creating Tags and Event Types (10%)
    • Create and use tags
    • Describe event types and their uses
    • Create an event type
  • Creating and Using Macros (10%)
    • Describe macros
    • Create and use a basic macro
    • Define arguments and variables for a macro
    • Add and use arguments with a macro
  • Creating and Using Workflow Actions (10%)
    • Describe the function of GET, POST, and Search workflow actions
    • Create a GET workflow action
    • Create a POST workflow action
    • Create a Search workflow action
  • Creating Data Models (10%)
    • Describe the relationship between data models and pivot
    • Identify data model attributes
    • Create a data model
  • Using the Common Information Model (CIM) Add-On (10%)
    • Describe the Splunk CIM
    • List the knowledge objects included with the Splunk CIM Add-On
    • Use the CIM Add-On to normalize data
Examination sources