Splunk Enterprise Certified Admin Exam Description:

The Splunk Enterprise Certified Admin exam is the final step towards the completion of the Splunk Enterprise Certified Admin certification. This upper-level certification exam is a 57-minute, 63-question assessment that evaluates a candidate’s knowledge and skills to manage various components of Splunk on a daily basis, including the health of the Splunk installation. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 60 minutes.

Topics include

1.0 Splunk Admin Basics 5%

2.0 License Management 5%

3.0 Splunk Configuration Files 5%

4.0 Splunk Indexes 10%

5.0 Splunk User Management 5%

6.0 Splunk Authentication Management 5%

7.0 Getting Data In 5%

8.0 Distributed Search 10%

9.0 Getting Data In – Staging 5%

10.0 Configuring Forwarders 5%

11.0 Forwarder Management 10%

12.0 Monitor Inputs 5%

13.0 Network and Scripted Inputs 5%

14.0 Agentless Inputs 5%

15.0 Fine-Tuning Inputs 5%

16.0 Parsing Phase and Data 5%

17.0 Manipulating Raw Data 5%