SPLK-1001 & SPLK-2002 Practice Test: Real Exam Questions - Udemy

A Splunk Core Certified User is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This entry-level certification demonstrates an individual's basic ability to navigate and use Splunk software.

A Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. This certification demonstrates an individual's ability to deploy, manage, and troubleshoot complex Splunk Enterprise environments.