Stay ahead by continuously learning and advancing your career. Learn More

Splunk Core Certified Consultant Exam

Practice Exam
Take Free Test

Splunk Core Certified Consultant Exam


The Splunk Core Certified Consultant exam equips individuals with a deep understanding of Splunk deployment methodologies, multi-tier Splunk architectures, clustering, and scalability. As a Splunk Core Certified Consultant, you'll possess the expertise to accurately size, install, and implement Splunk environments. This encompasses advanced-level knowledge and the capability to offer guidance on maximizing the effectiveness of these solutions.


Who should take the exam?

This exam is ideal for individuals who aspire to excel in Splunk consulting, offering an unparalleled array of practical labs and a week-long bootcamp to hone both technical and soft skills necessary for success in the upper Splunk certification. This includes:

  • Splunk experts
  • Splunk PS partners
  • Independent platform consultants


Exam Course Outline 

The Exam covers the given topics  - 

  • Domain 1: Deploying Splunk 5%
  • Domain 2: Monitoring Console 8%
  • Domain 3: Access and Roles 8%
  • Domain 4: Data Collection 15%
  • Domain 5: Indexing 14%
  • Domain 6: Search 14%
  • Domain 7: Configuration Management 8%
  • Domain 8: Indexer Clustering 18%
  • Domain 9: Search Head Clustering 10%

Splunk Core Certified Consultant Exam FAQs

The exam will cost you $125 USD with additional taxes.

Candidates will get the exam result immediately after submitting the exam. For candidates testing onsite, a printout of these results will be provided by the on-site proctor. Candidates testing via online proctoring will not receive a hard copy of their results, but will have the option to print a score report via their Pearson online account. Candidates (both onsite and online) who pass the exam will not receive any additional feedback regarding exam performance.

The Splunk Core Certified Consultant certification exam is the final step in the Splunk Core Certified Consultant track. This highly technical certification exam evaluates a candidate’s knowledge and skills in Splunk Deployment Methodology and best-practices for planning, data collection, and sizing, managing, and troubleshooting a standard with indexer and search head clustering.

This certification demonstrates a Consultant's ability to properly size, install, and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs. Also, the candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the course which are Fundamentals 3, Creating Dashboards with Splunk, Advanced Searching and Reporting, Indexer Cluster Implementation Lab, Distributed Search Migration Lab, Implementation Fundamentals Lab, Architect Implementation Labs (1-3) and Services: Core Implementation Instructor-Led Training course.

Before applying for the Splunk Core Certified Consultant exam, candidates are required to pass Splunk Enterprise Certified Admin, Splunk Core Certified Power User and Splunk Enterprise Certified Architect.

The topics covered in this exam include: Topic 1: Deploying Splunk 5%; Topic 2: Monitoring Console 8%; Topic 3: Access and Roles 8%; Topic 4: Data Collection 15%; Topic 5: Indexing 14%; Topic 6: Search 14%; Topic 7: Configuration Management 8%; Topic 8: Indexer Clustering 18%; Topic 9: Search Head Clustering 10%;

All certifications are now subject to a 3-year life cycle. This means that your certification is valid for three years from the date you passed the exam.

A Splunk Core Certified Consultant has a knowledge and understanding of Splunk Deployment Methodology and implementation in large Splunk installations and has expert-level knowledge of multi-tier Splunk architectures, clustering, and scalability topics.

Total seat time for the exam is 120 minutes out of which 3 minutes will be given for reviewing the exam agreement and 117 minutes to complete the exam.

The following content areas are general guidelines for the content to be included on the exam: • Prototyping • Using tokens • Improving performance • Customizing views • Using event handlers • Adding simple XML extensions • Introduction to Splunk apps • Planning app development • Adding data • Creating apps • Creating SplunkJS views • Creating a KV store • Using the Splunk REST API • Packaging apps • Calling Splunk REST endpoints with curl • Embedding calls to REST endpoints

The course includes: • Fundamentals 3 • Creating Dashboards with Splunk • Advanced Searching and Reporting courses by Splunk Education • Indexer Cluster Implementation Lab • Distributed Search Migration Lab • Implementation Fundamentals Lab • Architect Implementation Labs (1-3) • Services: Core Implementation Instructor-Led Training course

Candidates can schedule the Splunk Core Certified Consultant exam directly from PearsonVUE. Follow the steps for account creation and exam registration provided at home.pearsonvue.com/splunk. Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.

Candidates who do not pass an exam on their first attempt must wait 7 days to retake the exam. Further, candidates who do not pass an exam on their second attempt must wait 14 days to retake the exam. After that, the subsequent retakes are as follows: ● Fourth attempt 4 weeks or 28 days ● Fifth attempt 8 weeks or 56 days ● Sixth attempt 8 weeks or 56 days The retakes beyond the 6th attempt will be considered on a case-by-case basis. Splunk reserves the right to deny a retake beyond the 6th attempt

To change or cancel an existing appointment less than 48 hours in advance, please contact Pearson VUE Customer Support. All other appointment changes can be made via your Pearson VUE account.

Yes, if you have a handicapping condition or medical condition that necessitates a testing accommodation, please review our policy and details found here. For this, your request must be submitted a minimum of 30 days prior to your initial exam attempt so the need for accommodations can be verified and the specific accommodations requested can be met. And, accommodations cannot be applied to existing exam appointments or to retake attempts (unless approved for initial attempt). Also, the accommodations are not available for online-proctored exam appointments.

A digital badge refers to a credential or accomplishment that can be shared across the web. Digital badges contain metadata that allows a third party to verify your accomplishments including the criteria required to earn the badge and the period for which a badge is valid.

Yes we offer nearly 50% discount for the order more than 10 products at a time. You can reach the test prep training Helpdesk for more details. The member of the support staff will respond as soon as possible.

Once purchased, the practice exams can be accessed for the lifetime.

Yes testprep training offers free practice tests for Exam which can be used before the final purchase for complete test.

Yes, Testprep Training offers email support for any certification related query while you are preparing for the exam using our practice exams. Your query will be handled by experts in due course.