I’m now a Splunk Certified Power User!

Felipe Cerda Certified Splunk Power User

Last week I got certified as a Splunk Power User! I took the online test after doing all the pre-required courses and passed it.

For those interested in getting certified, here are some tips:

  1. The test is free, but you have to take the required courses first, which are not free. When you register for the test, the Splunk people will check if you’ve taken the courses.
  2. After finishing the courses, don’t take too long to take the certification test. It’ll be easier for you to remember all the content, which is a lot.
  3. The test is not hard, but they ask about everything you saw in the required courses, so make sure you study everything.
  4. You can view all the required and optional courses here.
  5. After you pass the test, they give you a nice diploma and some cool badges you can use online.

Splunk Power User Badge

Let me know if you have any questions about the certification.

35 thoughts on “I’m now a Splunk Certified Power User!”

    1. Hi Nikhil,

      The “Using Splunk” course takes about 5 hours.
      The “Searching and Reporting with Splunk” and “Creating Splunk Knowledge Objects” took 1 full day each. These were very intensive and the instructor was really good so you learn a lot.
      The “Infrastructure Overview” is a self paced course that is available for 30 days for you too study but it took me about 5 hours in total to review all its content.

      1. Thanks Felipe. I am currently doing the 3rd course in the pipeline, “creating splunk knowledge objects”. Just out of curiosity, Were the questions in the certification exam similar to the graded quiz which we answer at the the end of every course. ?

        1. Hi Nikhil,

          Yes, they were similar. Make sure you have all course material handy when you take the exam because they ask some detailed questions also that were not asked in the graded quizzes before.
          Good luck!

    1. I faced the same issue now. I have used all of my 3 attempts. The questions for really on a higher level and sometimes not related to the pre-req courses at all. I contacted splunk certification and they gave me 3 more attempts. I havent taken the exam in the new attempts, as I am currently going through the labs one more time. I would tell you any other info if I pass my exam in these additional attempts.

        1. Hello Vinit, the 3 additional retakes were complimentary. You don’t have to pay for them. If you can’t pass in these additional attempts, solunk suggests you to retake the courses and labs again. Good luck

      1. Hi,

        I also failed 2 attempts(65%, 70%), and 3rd attempt got crashed.I have sent an email to ‘certification@splunk.com’ .But i have not seen any response yet.Can some one help me to find out is there any other way to contact or how long do they take to respond back.

  1. Hey Felipe,

    From what I understand the Splunk cert test is online. Is it based more along the questions from the final tests and quiz? Or more on what you did during the labs? I’ve done everything except the architecture course. I’ve aced every single final quiz, but have seen people fail the cert test.

    1. Hi Leor,

      Yes, the cert test is online and it is based on everything you saw during the courses, from the content itself to the quizzes, so yes, some people could ace the final quizzes but fail in the cert test. Don’t underestimate the content from the courses.
      There are also many questions that you can find on Splunk Docs (http://docs.splunk.com). The test is “open book” so have that website open and the material from the required courses so you can access them easily.

      Good luck!

      1. Hi Felipe,

        First of all, your response is very helpful. I’m just curious about the format of the quiz. Is it similar to the final quizzes where it is more of a multiple choice and fill in the blanks? Or we will be required to perform simple to complex search syntax?

        Thanks in advance.

  2. I believe theirs only an hour to complete the test correct?I dont think is enough time to to look trough a book or guide. any other way that you believe we can pass this test.

    1. Hi Luis,

      Yes, There’s only 1 hour to complete the test but that’s more than enough if you’ve done all the required courses and studied previously. In my case I think I finished it with about 10 minutes to spare.

      I don’t think there’s another way but to do the courses and study. As I’ve said before, try to have the docs website and PDFs from the courses handy. Also, try to get familiar with the docs website so you know where to find things. You won’t have too much time to browse when doing the test but instead you’ll want to go exactly where you need to go.

      Good luck!

  3. Hi Felipe,

    First of all, your tips are very helpful. I’m just curious related to the quiz format. Is it similar to the Final Quizzes where it is composed of multiple choices and fill in the blanks? OR we are required to do simple to complex search syntax?

    Thanks in advance.

    1. Hi Jeremie,

      It is similar to the final quizzes. It is all multiple choice and fill in the blanks (by choosing one of the options). You won’t have to type words nor searches.

      Good luck!

  4. I no longer have access to the first three courses in order to study. Sadly, I didn’t complete the courses back to back. Any suggestions?

    1. Hi,

      Not that I can think of. I guess the closest thing would be to go to the docs page because all the information from the courses is there, but it is not organized in a way that is useful for you to prepare for the certification test.
      Did you try sending an email to the Education team at Splunk?

      Good luck.

  5. Hi Felipe,

    I am about to start the first course of the series for this certification and need your inputs to know if it is really required to complete all the optional courses as well along with the required courses? Request you to please suggest if you went through the optional courses that are listed? Is going through the required courses should be enough to pass the certification?

    Thanks in advance!

    1. Hi Uday,

      The optional courses are not required to pass the test.
      I only went though the required courses and that was enough. I will take the optional courses in the near future because they teach you new things that are useful for my job.

      Good luck!

    1. Hi Paul,

      Not right now since there’s another team in my organization that has all the administration of our Splunk implementation, but I could do it in the future if I get more into administration.


  6. Hi Felipe,

    i have taken all the 4 courses but unfortunately the “Using SPlunk” course got expired because i did it long back,so could you please suggest me whether the splunk will allow me to take test for Poser user or not.


    1. Hi Priyanka,

      I think they will let you take the test for Power User if you tell them you have enough experience using Splunk, let’s say at least 1 year using it.
      That is what I did when I registered for the test and they asked me how much time I had using Splunk.

      Good luck!

  7. Hi
    I am now eligible to get power user certification as i passed all modules with final test. But from where can i extract the certificate.. I cannot see any link

  8. Hi Felipe,

    I would like to know below details :
    1. is there any negative marking ?
    2. how many questions are there ?
    3. can we browse the internet while taking the test on the same machine ?


  9. Dear Felipe,

    Your account of the power user exam helped me a lot to get past this barrier. After scores of 70 and 74, I took your advice, went back to basics and it really helped me ace it.


Leave a Reply