1. Home
  2. Splunk
  3. SPLK-1001 Exam Syllabus

Splunk SPLK-1001 Exam Topics

Splunk SPLK-1001 Exam Overview :

Exam Name: Splunk Core Certified User
Exam Code: SPLK-1001
Certifications: Splunk Core Certified User Certification
See Expected Questions: Splunk SPLK-1001 Expected Questions in Actual Exam

Splunk SPLK-1001 Exam Objectives :

Section Weight Objectives
1.0 Splunk Basics 5% 1.1 Splunk components
1.2 Understand the uses of Splunk
1.3 Define Splunk apps
1.4 Customizing user settings
1.5 Basic navigation in Splunk
2.0 Basic Searching 22% 2.1 Run basic searches
2.2 Set the time range of a search
2.3 Identify the contents of search results
2.4 Refine searches
2.5 Use the timeline
2.6 Work with events
2.7 Control a search job2.8Save search results
3.0 Using Fields in Searches 20% 3.1 Understand fields
3.2 Use fields in searches
3.3 Use the fields sidebar
4.0 ??Search Language Fundamentals 15% 4.1 Review basic search commands and general search practices
4.2 Examine the search pipeline
4.3 Specify indexes in searches
4.4 Use the following commands to perform searches: tables, rename, fields, dedup, &sor
5.0 Using Basic Transforming Commands 15% 5.1 The top command
5.2 The rare command
5.3 The stats command
6.0 Creating Reports and Dashboards 12% 6.1 Save a search as a report
6.2 Edit reports
6.3 Create reports that display statistics (tables)
6.4 Create reports that display visualizations (charts)
6.5 Create a dashboard
6.6 Add a report to a dashboard
6.7 Edit a dashboard
7.0 Creating and Using Lookups 6% 7.1 Describe lookups
7.2 Examine a lookup file example
7.3 Create a lookup file and create a lookup definition
7.4 Configure an automatic lookup
7.5 Use the lookup in searches
8.0 Creating Scheduled Reports and Alerts 5% 8.1 Describe scheduled reports
8.2 Configure scheduled reports
8.3 Describe alerts
8.4 Create alerts
8.5 View fired alerts
Official Information https://www.splunk.com/pdfs/training/Splunk-Test-Blueprint-User-v.1.1.pdf

Updates in the Splunk SPLK-1001 Exam Topics:

Splunk SPLK-1001 exam questions and practice test are the best ways to get fully prepared. Study4exam's trusted preparation material consists of both practice questions and practice test. To pass the actual  Splunk Core Certified User SPLK-1001  exam on the first attempt, you need to put in hard work on these questions as they cover all updated  Splunk SPLK-1001 exam topics included in the official syllabus. Besides studying actual questions, you should take the  Splunk SPLK-1001 practice test for self-assessment and actual exam simulation. Revise actual exam questions and remove your mistakes with the Splunk Core Certified User SPLK-1001 exam practice test. Online and Windows-based formats of the SPLK-1001 exam practice test are available for self-assessment.