The Splunk Enterprise Certified Architect exam is the final step towards the completion of the Splunk Enterprise Certified Architect certification. This highly technical certification exam is an 87-minute, 90-question assessment that evaluates a candidate’s knowledge and skills in Splunk Deployment Methodology and best practices for planning, data collection, and sizing, managing, and troubleshooting a standard with indexer and search head clustering. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 90 minutes.

Topics Include:

1.0 Introduction 2%

2.0 Project Requirements 5%

3.0 Infrastructure Planning: Index Design 5%

4.0 Infrastructure Planning: Resource Planning 7%

5.0 Clustering Overview 5%

6.0 Forwarder and Deployment Best Practices 6%

7.0 Performance Monitoring and Tuning 5%

8.0 Splunk Troubleshooting Methods and Tools 5%

9.0 Clarifying the Problem 5%

10.0 Licensing and Crash Problems 5%

11.0 Configuration Problems 5%

12.0 Search Problems 5%

13.0 Deployment Problems 5%

14.0 Large-scale Splunk Deployment Overview 5%

15.0 Single-site Indexer Cluster 5%

16.0 Multisite Indexer Cluster 5%

17.0 Indexer Cluster Management and Administration 7%

18.0 Search Head Cluster 5%

19.0 Search Head Cluster Management and Administration 5%

20.0 KV Store Collection and Lookup Management 3%