Skip to content
Quizra

Vendor

Splunk exams

See which Quizra question sets are currently listed for this vendor, then open the exact exam you are preparing for.

Exams
13
Questions
2,963

Question sets

Open the exam you're preparing for

Certification paths

How the certifications fit together

Core User / Power User

Foundational Splunk platform skills

  • Splunk Core Certified UserSPLK-1001Entry-level; 60 questions, 60 min
  • Splunk Core Certified Power UserSPLK-1002Entry-level; 65 questions, 60 min
  • Splunk Core Certified Advanced Power UserSPLK-1004Intermediate; requires Power User; 70 questions, 60 min

Admin / Architect

Enterprise deployment and management

  • Splunk Enterprise Certified AdminSPLK-1003Professional; requires Power User; 56 questions, 60 min
  • Splunk Cloud Certified AdminSPLK-1005Professional; requires Power User; 60 questions, 75 min
  • Splunk Enterprise Certified ArchitectSPLK-2002Expert; requires Power User + Enterprise Admin; 85 questions, 90 min
  • Splunk Core Certified ConsultantSPLK-3003Expert; requires multiple prereqs; 86 questions, 120 min

Developer

Splunk app and solution development

  • Splunk Certified DeveloperSPLK-2001Intermediate; 65 questions, 90 min

Security / Cybersecurity Defense

SOC, threat detection, and SOAR automation

  • Splunk Certified Cybersecurity Defense AnalystSPLK-5001Intermediate; no prereqs; 66 questions, 75 min
  • Splunk Certified Cybersecurity Defense EngineerSPLK-5002Professional; 60 questions, 75 min
  • Splunk Enterprise Security Certified AdminSPLK-3001Legacy as of Jan 2026; replaced by Cybersecurity Defense track
  • Splunk SOAR Certified Automation DeveloperSPLK-2003Legacy as of Jan 2026; SOAR topics folded into Cybersecurity Defense Engineer

Observability / ITSI

Monitoring, metrics, and IT service intelligence

  • Splunk O11y Cloud Certified Metrics UserSPLK-4001Foundational; no prereqs; 54 questions, 60 min
  • Splunk IT Service Intelligence Certified AdminSPLK-3002Legacy as of Jan 2026

What changed

The timeline

  1. Sep 30, 2023

    SPLK-2001 (Certified Developer) retired

  2. 2024

    SPLK-3001, SPLK-3002, SPLK-2003 reclassified as LEGACY

  3. 2024-2025

    SPLK-5001, SPLK-5002 introduced (Cybersecurity Defense track)

  4. 2025

    SPLK-5002 prerequisite requirement removed

  5. January 1, 2026

    Legacy certification category added for ES Admin, SOAR Dev, and ITSI Admin

Choose the exam you're actually preparing for.

Open an exam page to see whether a sample is available and review the current access choices. Answers and explanations appear with the question when included.

View SPLK-1001