Splunk Core Certified User Exam Blueprint

65Questions

60 minDuration

70%Passing Score

$130Price

3 yearsValid For

Credential type: certification examination · verified on the issuer's site September 20, 2026 issuer page

1.1 Splunk components 5%

2.1 Run basic searches 22%

3.1 Understand fields 20%

4.1 Review basic search commands and general search practices 15%

5.1 The top command 15%

6.1 Save a search as a report 12%

7.1 Describe lookups 6%

8.1 Describe scheduled reports 5%

Question TypesMultiple Choice, Multiple Response

FormatLinear

Online ProctoringAvailable

ID RequirementsGovernment-issued photo ID required. Name on ID must match registration exactly.

RenewalRequired -- Recertify by passing the current version of the exam before expiry.

Retake Policy30-day waiting period between failed attempts. No limit on total attempts.