Splunk Core Certified Power User

Free diagnostic practice

Splunk logo

Splunk Core Certified Power User

SPLK-1002

The Splunk Core Certified Power User exam validates a candidate's ability to go beyond basic searching and move into the realm of data analysis and optimization

60 min
70% to pass
65 bank questions
10 domains
Start the full practice examSplunk Core Certified Power User — freshly shuffled Foundation questions, timed, with domain scoring and explanations.

Exam syllabus, organized by domain

The official Splunk blueprint, with the real weight each domain carries on test day.

Try a real question

Answer one question from the live bank. Grading happens on our servers, so the answer key never reaches the page.

Try a real question

Sample Splunk Core Certified Power User exam question

Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.

MasterCorrelation (stats vs transaction)

Analysts pass the error message Internal Server Error to a macro that builds a correlation search. The macro substitutes the message into SPL and the search breaks. Which strategy aligns with Splunk's literal text substitution behavior?

Exam facts at a glance

Every figure below comes from the certification record or from the question bank itself.

Time limit
60 minutes
Passing score
70%
Domains
10
Questions in our bank
65
Level
ASSOCIATE
Measured complexity
1.8 / 10
Question mix
25 single · 20 multi · 20 interactive

Where the hard questions actually are

We score every question in the bank 1-10 on a reproducible formula. Below is the per-domain breakdown.

Exam complexity score1.8/10Gentle · measured across 65 bank questions
  • CIM Normalization7 questions · complexity 1.7/10 · Gentle

    29% multi-select · 0% scenario · 29% interactive

  • Correlation (stats vs transaction)10 questions · complexity 1.8/10 · Gentle

    30% multi-select · 0% scenario · 30% interactive

  • Data Models7 questions · complexity 1.7/10 · Gentle

    29% multi-select · 0% scenario · 29% interactive

  • Field Aliases & Calculated Fields6 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Field Extractions6 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Filtering & Formatting (eval, where, fillnull)6 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Macros7 questions · complexity 1.7/10 · Gentle

    29% multi-select · 0% scenario · 29% interactive

  • Tags & Event Types6 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Visualizations (chart, timechart)3 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Workflow Actions7 questions · complexity 1.7/10 · Gentle

    29% multi-select · 0% scenario · 29% interactive

See the full difficulty breakdown and the methodology

Read the questions before you take them

The question bank with the correct answer and a written explanation for every item.

Browse 65 Splunk Core Certified Power User questions with answers

Frequently asked questions

What you need to know before attempting the Splunk Core Certified Power User certification.

Compare related certifications

Related articles