SPLK-3001 — Splunk Enterprise Security Certified Admin
The legacy Splunk Enterprise Security administration certification, now frozen as of January 2026 — exam content will no longer be updated though the cert can still be earned and renewed. Covers administration of Splunk ES including correlation searches, data models, asset management, and workflow configuration. Splunk recommends transitioning to SPLK-5002 for new candidates pursuing this track. Still valid to earn for now but its relevance will diminish as the Cybersecurity Defense track becomes the primary pathway. Include flag for retiring status.
| Issuer | Splunk (Cisco) |
|---|
| Level | expert |
|---|
| Domains | Defensive Security / SOC |
|---|
| Practical weight | 0% |
|---|
| Cost (USD) | 130 |
|---|
| Renewal | 3 years |
|---|
| Skills | splunk_es_administration, correlation_search_management, asset_identity_management, notable_event_workflow, data_model_acceleration, es_configuration |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap