Description
This advanced certification exam is a 57-minute, 70-question assessment which evaluates a candidateās knowledge
and skills in more advanced searching and reporting commands, advanced use cases of knowledge objects, and
best practices for building dashboards and forms. Candidates can expect an additional 3 minutes to review the exam
agreement, for a total seat time of 60 minutes.
In order to be prepared for the certification exam, Splunk recommends completed the following courses:
ā Using Fields
ā Working with Time
ā Comparing Values
ā Result Modification
ā Leveraging Lookups and Subsearches
ā Correlation Analysis
ā Multivalue Fields
ā Search Optimization
ā Creating Knowledge Objects
ā Creating Field Extractions
ā Enriching Data with Lookups
ā Data Models
ā Introduction to Dashboards
ā Dynamic Dashboards