Splunk Certification Topics

Eval command

2 exams

stats command

2 exams

SPL

2 exams

Search Head Cluster

2 exams

Deployer

2 exams

inputs.conf

2 exams

Universal Forwarder

2 exams

distributed search

2 exams

LDAP authentication

2 exams

indexer cluster

2 exams

performance tuning

2 exams

_internal index

2 exams

search optimization

2 exams

assets

2 exams

notable events

2 exams

default ports

2 exams

SplunkWeb

2 exams

search head

2 exams

troubleshooting

2 exams

search performance

2 exams

workflow actions

1 exam

secondary search

1 exam

Splunk features

1 exam

Splunk macros

1 exam

Macro syntax

1 exam

Search commands

1 exam

Search Configuration

1 exam

Time Range

1 exam

Splunk Search

1 exam

CIM

1 exam

Data Models

1 exam

Documentation

1 exam

Add-on

1 exam

transforming commands

1 exam

default output

1 exam

search results

1 exam

GET requests

1 exam

External resources

1 exam

Data retrieval

1 exam

standard deviation

1 exam

statistical functions

1 exam

Splunk command

1 exam

geom command

1 exam

Choropleth maps

1 exam

Visualization

1 exam

Auto-Extracted Fields

1 exam

Field Configuration

1 exam

Pivot

1 exam

Field Extractor

1 exam

delimiters

1 exam

field extraction

1 exam

indexes.conf

1 exam

Index paths

1 exam

Index configuration

1 exam

Required settings

1 exam

Splunk Architecture

1 exam

Configuration Management

1 exam

Forwarder inputs

1 exam

Configuration methods

1 exam

Deployment Server

1 exam

LINE_BREAKER

1 exam

Event Parsing

1 exam

props.conf

1 exam

Regular Expressions

1 exam

Configuration Precedence

1 exam

App Deployment

1 exam

SEDCMD

1 exam

Data Masking

1 exam

Monitor stanza

1 exam

Wildcard matching

1 exam

File input

1 exam

search architecture

1 exam

search peers

1 exam

Authentication strategies

1 exam

User authentication

1 exam

External authentication

1 exam

knowledge object bundles

1 exam

search peer replication

1 exam

file paths

1 exam

search factor

1 exam

high availability

1 exam

searchable copies

1 exam

indexing performance

1 exam

parallel ingestion pipelines

1 exam

server.conf

1 exam

multisite clustering

1 exam

search site affinity

1 exam

site0

1 exam

SHC configuration

1 exam

storage capacity planning

1 exam

replication factor

1 exam

metrics.log

1 exam

internal logging

1 exam

Splunk monitoring

1 exam

splunkd.log

1 exam

log channel field

1 exam

monitoring

1 exam

streaming commands

1 exam

search best practices

1 exam

filtering

1 exam

Monitoring Console

1 exam

health check

1 exam

deployment health

1 exam

administration tools

1 exam

deployment client

1 exam

search query

1 exam

wildcards

1 exam

artifact data paths

1 exam

playbook data access

1 exam

System Health Display

1 exam

disk usage

1 exam

memory usage

1 exam

load average

1 exam

ROI settings

1 exam

FTE

1 exam

analyst metrics

1 exam

configuration

1 exam

Python API

1 exam

phantom.create_artifact

1 exam

artifact creation

1 exam

custom function

1 exam

app configuration

1 exam

credentials

1 exam

action parameters

1 exam

REST API

1 exam

artifact filtering

1 exam

CEF fields

1 exam

SHA1

1 exam

container status

1 exam

container management

1 exam

New In Progress Closed

1 exam

workbooks

1 exam

event analysis

1 exam

case management

1 exam

user coordination

1 exam

data ingestion

1 exam

sources menu

1 exam

ingestion wizard

1 exam

artifact immutability

1 exam

container data

1 exam

SOAR data model

1 exam

notes vs artifacts

1 exam

ES annotations

1 exam

data enrichment

1 exam

investigation workflow

1 exam

CMMC

1 exam

compliance frameworks

1 exam

cybersecurity maturity

1 exam

regulatory compliance

1 exam

MTTD

1 exam

SOC metrics

1 exam

mean time to detect

1 exam

triage efficiency

1 exam

Risk Based Alerting

1 exam

RBA

1 exam

Enterprise Security

1 exam

behavioral detection

1 exam

search modes

1 exam

Verbose mode

1 exam

events tab

1 exam

data aggregation

1 exam

search pipeline

1 exam

incident response plan

1 exam

security incident handling

1 exam

IRP

1 exam

best practices

1 exam

APT

1 exam

hacktivism

1 exam

threat actor motivations

1 exam

cyber threats

1 exam

cyber threat intelligence

1 exam

strategic intelligence

1 exam

threat actor

1 exam

intelligence types

1 exam

ESCU

1 exam

SOAR

1 exam

security content delivery

1 exam

Risk Analysis dashboard

1 exam

identities

1 exam

risk scoring

1 exam

CIM data models

1 exam

Web

1 exam

Authentication

1 exam

Network Traffic

1 exam

corporate domain lookup

1 exam

email domain

1 exam

identity configuration

1 exam

initial setup

1 exam

risk score

1 exam

risk analysis

1 exam

UI elements

1 exam

default account activity

1 exam

lookup table

1 exam

administrative identities

1 exam

correlation search

1 exam

endpoint security

1 exam

data sources

1 exam

workstations

1 exam

endpoint monitoring

1 exam

KV Store

1 exam

management port

1 exam

Security Posture dashboard

1 exam

notable events overview

1 exam

ES dashboards

1 exam

SOC monitoring

1 exam

identity management

1 exam

identity lookup

1 exam

CSV lookup

1 exam

identity data storage

1 exam

correlation searches

1 exam

concurrent searches

1 exam

error messages

1 exam

indexes

1 exam

ITSI teams

1 exam

global team

1 exam

team administration

1 exam

service ownership

1 exam

troubleshooting workflow

1 exam

service analyzer

1 exam

deep dive

1 exam

itsi_summary index

1 exam

KPI results

1 exam

data storage

1 exam

ITSI installation

1 exam

single search head

1 exam

deployment

1 exam

Manage Apps

1 exam

entity metadata

1 exam

data audit

1 exam

requirements gathering

1 exam

entity aliases

1 exam

SplunkD

1 exam

HTTP event collector

1 exam

distributed deployment

1 exam

ITSI app

1 exam

component installation

1 exam

anomaly detection

1 exam

entity cohesion

1 exam

ML algorithms

1 exam

service dependencies

1 exam

cyclic dependency

1 exam

dependency configuration

1 exam

summary indexing

1 exam

report acceleration

1 exam

data summarization

1 exam

fieldsummary command

1 exam

field statistics

1 exam

count

1 exam

distinct count

1 exam

xyseries command

1 exam

chart transformation

1 exam

multi-series output

1 exam

long time ranges

1 exam

small datasets

1 exam

split function

1 exam

eval functions

1 exam

SPL syntax

1 exam

multivalue fields

1 exam

tstats command

1 exam

summariesonly

1 exam

accelerated data models

1 exam

data model acceleration

1 exam

spath command

1 exam

XML JSON extraction

1 exam

required arguments

1 exam

multivalue functions

1 exam

eval

1 exam

mvexpand

1 exam

makemv

1 exam

form inputs

1 exam

tokens

1 exam

inline search

1 exam

dashboard panels

1 exam

distributable streaming

1 exam

indexer execution

1 exam

preceding commands

1 exam

search processing

1 exam

subsearches

1 exam

result sets

1 exam

app bundle

1 exam

configuration conflict

1 exam

indexing pipeline

1 exam

queue backpressure

1 exam

regex transforms

1 exam

typing queue

1 exam

Search Job Inspector

1 exam

tailingprocessor

1 exam

whitelist regex

1 exam

log monitoring

1 exam

bind credentials

1 exam

base DN

1 exam

user management

1 exam

captain election

1 exam

network partition

1 exam

resiliency

1 exam

multisite cluster

1 exam

site membership

1 exam

cluster master

1 exam

pipeline processors

1 exam

tcp output

1 exam

syslog output

1 exam

disk space

1 exam

cluster operation

1 exam

fault tolerance

1 exam

dashboard instructions

1 exam

dashboard usability

1 exam

dashboard configuration

1 exam

event feed chart

1 exam

custom events

1 exam

detector events

1 exam

dashboard charts

1 exam

alert subscription

1 exam

email notification

1 exam

detector alerts

1 exam

Line chart

1 exam

Area chart

1 exam

Column chart

1 exam

individual plot visualization

1 exam

cyclic metrics

1 exam

moving average

1 exam

detector configuration

1 exam

alert smoothing

1 exam

detector creation

1 exam

chart detector

1 exam

detector linking

1 exam

custom dashboard

1 exam

detector cloning

1 exam

alert management

1 exam

401 unauthorized

1 exam

access token

1 exam

realm configuration

1 exam

collector errors

1 exam

Chart Builder

1 exam

metric finder

1 exam

saving charts

1 exam

dashboards

1 exam

alert sensitivity

1 exam

trigger sensitivity

1 exam

static threshold

1 exam

alert tuning

1 exam