OpenExamsFREE PRACTICE — ANY EXAM

Splunk Core Certified User — Requirements & Free Practice

US · License preparation

200 free questions · Answer explanations · No signup required

Loading selected examination banks…

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

Splunk Core Certified User

Entry-level certification demonstrating basic use of Splunk Enterprise and Splunk Cloud: searching, fields, lookups, alerts, statistical reports and dashboards.

Licensing authority: Cisco Systems, Inc. · Application information

Initial by examination
Splunk Core Certified User
Certification
Pass the Splunk Core Certified User examination and comply with the current certification agreement and candidate requirements.
Delivery
Pearson test center or online proctoring, subject to appointment availability; no individual future seat is guaranteed. Online candidates must pass the system test on the exam computer and location before exam day, and meet identification, workspace and proctor rules. Closed-book examination; agreement must be accepted within the initial 3 minutes. Current handbook states a minimum 48-hour cancellation/rescheduling policy.
Eligibility
Candidates must be at least 18, or ages 13-17 with signed parental acknowledgement; under 13 are ineligible under the agreement, subject to the agreement's stated local-law provisions. Candidate requirements also include a Splunk.com account with current email, Cisco Certmetrics account, registration name matching photo ID, required identification and acceptance of certification and Pearson candidate agreements.
Language
English only in this submission; the same official exam also offers Japanese, which is outside this task.
Prerequisites
No prerequisites; no prerequisite exams. The blueprint training list is suggested and non-exhaustive; no mandatory course, laboratory or school enrollment requirement is stated for this entry-level exam.
Registration
New registration uses Cisco Certmetrics from 2026-10-20. Existing Splunk appointments are honored through 2027-03-01. This is a system migration, not an exam retirement or second exam identity.
Validity
No official exam-version start, retirement or replacement date was found in the current track page, linked blueprint, current handbook or integration FAQ. Null dates are intentional; no dated future exam version or other certification is introduced.

Splunk Core Certified User

Provider
Pearson VUE
Format
English multiple-choice, proctored, closed-book knowledge examination; test center or online proctoring.
Exam questions
Total questions: 60.
Time limit
60 minutes total, including 3 minutes to review the exam agreement.
Exam fee
USD 130 per attempt
Examination outline
  • Splunk Basics (5%)
    • Splunk components
    • Understand the uses of Splunk
    • Define Splunk apps
    • Customizing user settings
    • Basic navigation in Splunk
  • Basic Searching (22%)
    • Run basic searches
    • Set the time range of a search
    • Identify the contents of search results
    • Refine searches
    • Use the timeline
    • Work with events
    • Control a search job
    • Save search results
  • Using Fields in Searches (20%)
    • Understand fields
    • Use fields in searches
    • Use the fields sidebar
  • Search Language Fundamentals (15%)
    • Review basic search commands and general search practices
    • Examine the search pipeline
    • Specify indexes in searches
    • Use the following commands to perform searches: tables, rename, fields, dedup, and sort
  • Using Basic Transforming Commands (15%)
    • The top command
    • The rare command
    • The stats command
  • Creating Reports and Dashboards (12%)
    • Save a search as a report
    • Edit reports
    • Create reports that display statistics (tables)
    • Create reports that display visualizations (charts)
    • Create a dashboard
    • Add a report to a dashboard
    • Edit a dashboard
  • Creating and Using Lookups (6%)
    • Describe lookups
    • Examine a lookup file example
    • Create a lookup file and create a lookup definition
    • Configure an automatic lookup
    • Use the lookup in searches
  • Creating Scheduled Reports and Alerts (5%)
    • Describe scheduled reports
    • Configure scheduled reports
    • Describe alerts
    • Create alerts
    • View fired alerts
Examination sources