Splunk Core Certified Power User

Who can take it

Splunk logo

Splunk Core Certified Power User Eligibility

SPLK-1002

Whether you can sit the Splunk Core Certified Power User certification exam: prerequisites, who the exam is for, and the skills it assesses.

2 prerequisites
associate level
5 skills

Prerequisites and requirements

Published requirements for this certification.

  • Splunk Core Certified User certification (recommended)
  • Hands-on experience with Splunk Enterprise

Who this exam is for

Security Analysts, IT Operations Professionals, Data Analysts, and System Administrators who have mastered basic Splunk searching and wish to demonstrate advanced proficiency in data manipulation and reporting.

Skills assessed

What the exam actually tests, beyond the domain names.

Advanced SPL Mastery
Data Normalization
Complex Visualization
Search Optimization
Data Model Management

The domains you will be assessed on

Eligibility is not only about paperwork. These are the areas you have to actually know.

DomainWeightTopic count
Macros10%3
Data Models10%3
Workflow Actions10%3
CIM Normalization10%3
Field Extractions10%3
Tags & Event Types10%3
Field Aliases & Calculated Fields10%3
Visualizations (chart, timechart)5%3
Correlation (stats vs transaction)15%3
Filtering & Formatting (eval, where, fillnull)10%3

How demanding this exam is

Cognitive load
High - Requires deep understanding of SPL (Search Processing Language) logic and data structuring principles.

Our focus for this certification: The exam prioritizes the ability to transform raw, unstructured data into structured, meaningful datasets through search-time configurations and optimized search commands.

More about the Splunk Core Certified Power User exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Splunk Core Certified Power User exam.