1. Home
  2. Splunk
  3. SPLK-1002 Exam Syllabus

Splunk SPLK-1002 Exam Topics

Splunk SPLK-1002 Exam Overview :

Exam Name: Splunk Core Certified Power User
Exam Code: SPLK-1002
Certifications: Splunk Core Certified Power User Certification
See Expected Questions: Splunk SPLK-1002 Expected Questions in Actual Exam

Splunk SPLK-1002 Exam Objectives :

Section Weight Objectives
1.0 Using Transforming Commands for Visualizations 5% 1.1 Use the chart command
1.2 Use the timechart command
2.0 Filtering and Formatting Results 10% 2.1 The eval command
2.2 Use the search and where commands to filter results
2.3 The fillnull command
3.0 Correlating Events 15% 3.1 Identify transactions
3.2 Group events using fields
3.3 Group events using fields and time
3.4 Search with transactions
3.5 Report on transactions
3.6 Determine when to use transactions vs. stats
4.0 Creating and Managing Fields 10% 4.1 Perform regex field extractions using the Field Extractor (FX)
4.2 Perform delimiter field extractions using the FX
5.0 Creating Field Aliases and Calculated Fields 10% 5.1 Describe, create, and use field aliases
5.2 Describe, create, and use calculated fields
6.0 Creating Tags and Event Types 10% 6.1 Create and use tags
6.2 Describe event types and their uses
6.3 Create an event type
7.0 Creating and Using Macros 10% 7.1 Describe macros
7.2 Create and use a basic macro
7.3 Define arguments and variables for a macro
7.4 Add and use arguments with a macro
8.0 Creating and Using Workflow Actions 10% 8.1 Describe the function of GET, POST, and Search workflow actions
8.2 Create a GET workflow action
8.3 Create a POST workflow action
8.4 Create a Search workflow action
9.0 Creating Data Models 10% 9.1 Describe the relationship between data models and pivot
9.2 Identify data model attributes
9.3 Create a data model
10.0 Using the Common Information Model (CIM) Add-On 10% 10.1 Describe the Splunk CIM
10.2 List the knowledge objects included with the Splunk CIM Add-On
10.3 Use the CIM Add-On to normalize data
Official Information https://www.splunk.com/pdfs/training/Splunk-Test-Blueprint-Power-User-v.1.1.pdf

Updates in the Splunk SPLK-1002 Exam Topics:

Splunk SPLK-1002 exam questions and practice test are the best ways to get fully prepared. Study4exam's trusted preparation material consists of both practice questions and practice test. To pass the actual  Splunk Core Certified Power User SPLK-1002  exam on the first attempt, you need to put in hard work on these questions as they cover all updated  Splunk SPLK-1002 exam topics included in the official syllabus. Besides studying actual questions, you should take the  Splunk SPLK-1002 practice test for self-assessment and actual exam simulation. Revise actual exam questions and remove your mistakes with the Splunk Core Certified Power User SPLK-1002 exam practice test. Online and Windows-based formats of the SPLK-1002 exam practice test are available for self-assessment.