Splunk Certified Enterprise Security Administrator
As part of Splunk Certification, a Splunk Certified Enterprise Security Admin manages a Splunk Enterprise Security environment, including ES event processing and normalisation, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence, protocol intelligence configuration and customisations.
This Splunk Certification demonstrates an individual’s ability to install, configure and manage a Splunk Enterprise Security deployment.
​
Please note: There are two approved coursework paths for this Splunk Certification track. Candidates may complete either Splunk Enterprise System Administration and Splunk Enterprise Data Administration or Splunk Cloud Administration as part of this Splunk Certification track.
Learning Path
Splunk Certifications Exam
When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500.
How to register for your exam
​
There are three ways to purchase a PearsonVUE registration voucher:
​
1) Directly from PearsonVUE
This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk
Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.
​
2) From Splunk (as an individual)
Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk .
3) From Splunk (as an account)
Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk
​
All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.