Accredited Security Analyst I
A Security Analyst's job is to perform the role of Security Analyst at a Security Operations Center (SOC) environment using the relevant tools of Splunk Security suite.
​
You will learn how to:
-
Use Splunk at a foundational level​
-
Identify and track security incidents, analyze security risks, use predictive analytics and threat discovery using Splunk Enterprise Security and tools​
-
Configure and use Phantom and UBA
​
The pre-requisites for this accreditation is to complete the Splunk Core Certified Power User.
Learning Path
The Using Splunk Enterprise Security course prepares security practitioners to track security incidents, analyse security risks, use predictive analytics, and threat discovery.
The Using Splunk Enterprise Security course covers the use of Enterprise Security’s dashboards, forms and workflow to identify, find root cause and resolve security issues.
-
Splunk Operations Suite for Partners
-
Splunk SIEM Solutions for Partners
-
Splunk Phantom (SOAR) for Partners
-
Working with Splunk Support for Partners
-
Enterprise Security Phantom and UBA Hands on Workshop
Splunk Accredited Security Analyst I Accreditation – Exam is free of charge in the Partner Portal once all pre-requisites have been completed.
Certifications Exam
When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500.
How to register for your exam
​
There are three ways to purchase a PearsonVUE registration voucher:
​
1) Directly from PearsonVUE
This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk
Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.
​
2) From Splunk (as an individual)
Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk .
3) From Splunk (as an account)
Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk
​
All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.