SPLK-1002 — Splunk Core Certified Power User
Splunk's intermediate certification covering advanced SPL queries, data models, knowledge objects, and CIM usage — the skills needed to build meaningful security content in Splunk. More practically useful than SPLK-1001 for SOC analysts writing custom detection logic. Pure MCQ exam. Not DoD 8140 approved. A meaningful stepping stone to SPLK-5001 (Cybersecurity Defense Analyst) for analysts who want to develop custom detection content rather than just operate pre-built dashboards.
| Issuer | Splunk (Cisco) |
|---|
| Level | intermediate |
|---|
| Domains | Defensive Security / SOC |
|---|
| Practical weight | 0% |
|---|
| Cost (USD) | 130 |
|---|
| Renewal | 3 years |
|---|
| Skills | advanced_spl_queries, splunk_data_models, splunk_transforming_commands, splunk_knowledge_objects, splunk_field_extractions, cim_usage |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap