Splunk Core Certified Power User
Splunk logo

Splunk Core Certified Power User

SPLK-1002

Validate your ability to perform advanced searches, create complex visualizations, and manage data models within the Splunk ecosystem to drive actionable security and operational insights.

Exam syllabus, organized by domain

Try a real question

Sample Splunk Core Certified Power User exam question

Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.

MasterData Models

A large Splunk environment has a system-level macro named `enrich_user` that is used by all apps for basic user enrichment. The Finance app independently defines an app-level macro with the same name to enforce Finance-specific enrichment rules. A Finance user runs a search that invokes `enrich_user` from within the Finance app. Which statement best describes the behavior of Splunk when the search is executed?

Frequently asked questions

Key facts about the Splunk Core Certified Power User certification and how to prepare for it.

Skills & Requirements

What you need to know before attempting the Splunk Core Certified Power User exam.