Ingeniq is authorised by Splunk to deliver Splunk courses and offers both Instructor led public and dedicated virtual and face-to-face courses.


The Splunk certification program is designed to train candidates for their current role or for the role they seek as an industry professional to better serve their organization or to become a highly skilled, standout applicant in today’s competitive job market.

Download the Splunk Certification Candidate Handbook to learn more about the changes.

To register for an exam with Pearson Vue you need to connect your Splunk.com account with the testing partner platform. Once you have done this and submitted the form to Pearson Vue you will be sent an authorization to test email containing your Splunk ID. This is your personal ID number, which you’ll need to access your PearsonVUE account. Access the exam registration tutorial here.

A Splunk Core Certified User is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This entry-level certification demonstrates an individual’s basic ability to navigate and use Splunk software.

A Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions, create data models and normalize data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms.

A Splunk Core Certified Advanced Power User has greater depth of knowledge and skills in complex searching and reporting commands, advanced use cases of knowledge objects, and best practices for building dashboards and forms. This certification demonstrates an individual’s ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most
out of their data.

A Splunk Enterprise Certified Admin manages various components including license management, indexers and search heads, configuration and monitoring data. This demonstrates an individual’s ability to support the day-to-day administration and health of a Splunk Enterprise environment.

A Splunk Enterprise Certified Architect understands best-practices for planning, data collection and sizing for a distributed deployment, manages and troubleshoot a standard distributed deployment with indexer and search head clustering. This demonstrates an individual’s ability to deploy, manage, and troubleshoot complex Splunk Enterprise environments.

A Splunk Certified Developer builds apps using the Splunk Web Framework. This certification demonstrates an individual’s expertise in drilldowns, advanced behaviors and visualizations, planning, creating, and packaging apps, and REST endpoints. Please Note that you must already hold the Splunk Enterprise Certified Admin Certification to complete this certification.

A Splunk IT Service Intelligence Certified Admin installs and configures Splunk’s app for IT Service Intelligence (ITSI), including ITSI architecture, deployment planning, service design and implementation, notable events, and developing glass tables and deep dives. This demonstrates’s an individual’s ability to deploy, manage, and utilize Splunk ITSI to monitor mission-critical services.

A Splunk Core Certified Consultant has a thorough understanding of Splunk Deployment Methodology and implementation in large Splunk installations and has expert-level knowledge of multi-tier Splunk architectures, clustering, and scalability topics. This demonstrates a Consultant’s ability to properly size, install, and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs.

A Splunk Certified Enterprise Security Admin manages ES event processing and normalization, deployment requirements, risk analysis settings, threat intelligence and protocol intelligence configuration, and customisations. This demonstrates an individual’s ability to install, configure, and manage a Splunk Enterprise Security deployment.

A Splunk Cloud Certified Admin manages and configures details for Splunk Cloud, including data inputs and forwarder configuration, data management, user accounts, and basic monitoring and problem isolation. This certification demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Cloud environment.

One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress.

Participant, Splunk Enterprise Data Administration