1. Home
  2. Splunk
  3. SPLK-1004 Exam Syllabus

Splunk SPLK-1004 Exam Syllabus

Start Free SPLK-1004 Exam Practice After Reviewing the Topics

Before starting your SPLK-1004 exam preparation, it is recommended to review the complete Splunk Core Certified Advanced Power User exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free SPLK-1004 questions. We also provide premium SPLK-1004 practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

Splunk SPLK-1004 Exam Objectives

Section Weight Objectives
Utilizing Transforming Commands for Visualizations 5%

Utilize the time chart and chart commands 

 
Formatting and Filtering Outcomes 10% Utilize the filnull and eval commands. Also, assist using Search and Where commands
Correlating Events 15% Describe transactions, utilize field and group events, use time to group events, and Search with transactions. Identify the use of stats vs transactions
Manage and Build Fields 10%

Utilize field extractors for regex field extractions. Also, use them for delimiter field extractions 

 
Building calculated fields and field Aliases 10%

Define, utilize, and build aliases and calculated fields

 
Build event types and tags 10% Utilize tags and build hypes. Building event types and how they are used
Build and Utilize Macros 10% Define macros and utilize basic macros. Describe arguments and variables for macros
Creating and Using Workflow Actions 10%

Creating and Using Workflow Actions 10%. Build GET and POST workflow actions and also build search workflow action 

 
 
Build Data Models 10% 10% Explain the link between data models and pivot, identify the characteristics of data models, and build a data model.
Common Information Model utilization (Add-on) 10%

Explain what is Common Information Model and list knowledge objects with the Common Information Model. Utilize the add-on to normalize information 

 
Official Information https://www.splunk.com/en_us/training/certification-track/splunk-core-certified-advanced-power-user.html