Didn't Pass Splunk User Exam

I just took the online Splunk Fundamentals class and read through the document they sent out. I thought I didn't need to prepare much for the test. How hard could a free test be? Well, it was a little harder than I thought. I do not have any Splunk experience. All I did was read the documents and do the labs they recommended. Well, I have to wait 5 days to retake the test. I got a 70% and needed 75%.

Anyone else take the test? I saw another thread that listed a few resources for Splunk training. Doesn't look like there is too much out there that is free.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

globalenjoi

Just wanted to throw this in here, but Splunk has a program offering the Fundamentals 1 and 2 courses to veterans for free. You get 30 days for each part.

https://workplus.splunk.com/veterans

I haven't actually started mine yet, it's just sitting there until I finish up some other training. But I'm looking forward to working through it.

jwdk19

I just passed the Splunk User cert. I am starting the Power User training shortly.

Mooseboost

Did you take the User 6.x certification exam? Noticed Fundamentals are for 7.x but the exam seems to be 6.x?

nisti2

Thats must be hard taking two different things on the same day.
Congratulations amazing task!

GettingThereSoon wrote: »

Just passed 2 cert exams today...1st one is AWS Solution Architect - Associate in the morning, then 2nd one Splunk Certified User in the afternoon. The 45 questions in Splunk exam were much harder than the 35 questions in the course's final quiz. It is different from AWS exam that you can't go back to previous questions so no need to rush.

The next exam coming up is the Splunk Certified Power User. Our company has the subscription, so it is "free" for us to take the course and the exam.

Update (4/15/201: Passed Certified Power User exam today. Had about 10 min left when finishing last question. There were some tricky questions in the beginning (similar to the User exam) and got easier towards the end.

jwdk19

Yea I noticed that also Moose. Fundamentals 1 training was for Splunk 7 but the exam is Splunk 6

cyberguypr

Quick note to make sure those interested in Splunk certs are aware that the cert program is being relaunched in August and exams are moving to Pearson.

https://www.splunk.com/en_us/training/certification-track/splunk-certification-program-relaunch.html

GeekyChick

cyberguypr wrote: »

Quick note to make sure those interested in Splunk certs are aware that the cert program is being relaunched in August and exams are moving to Pearson.

https://www.splunk.com/en_us/training/certification-track/splunk-certification-program-relaunch.html

I saw that. That will make a few people unhappy. It looks like all previously passed exams will be nullified. I'm glad I only have my User so far.

cyberguypr

I hear you. I am absolutely letting mine expire.

jwdk19

Thanks for the info cyberguy. I better hold off on the Power User for now.

shochan

well all be damn

https://www.youtube.com/watch?v=o2AhZLV0ydY

McxRisley

Yeeaaaaahhhhh.... There's a reddit post from a Splunk employee looking for feedback on this new model and the responses are pretty damning. This is definitely not a good idea on Splunk's part. We'll see if they actually go through with it...

thedudeabides

New certification program is fine. Cancelling validity of certifications already earned by people is a very bad decision.

McxRisley

thedudeabides wrote: »

New certification program is fine. Cancelling validity of certifications already earned by people is a very bad decision.

Exactly. This where Splunk will shoot themselves in the foot. Cancelling peoples certs who just spent over 10K getting their architect level 1 and 2 certs is a GIANT slap in the face. This will be the downfall of Splunk if they go through with this. They aren't the only SIEM in town...

cyberguypr

Agree. Same crap EC-Council pulled and why they are #1 in my black list.

jwdk19

My itty bity splunk certified user is going bye bye?😮lol. I didnt realize that the new certs will practically make existing ones null and void.

Pointless for me to do the the Splunk Certified Power User in the current format even if it is for free. Will be void in a month.

JDMurray

jwdk19 wrote: »

Pointless for me to do the the Splunk Certified Power User in the current format even if it is for free. Will be void in a month.

We do certifications to learn the material so we can get better jobs and do our jobs better. The cert on your resume only gets you a first-round interview; it's the cert knowledge in your head that allows you to keep your job.

Do certifications for the knowledge, not the paper.

jwdk19

JDMurray wrote: »

We do certifications to learn the material so we can get better jobs and do our jobs better. The cert on your resume only gets you a first-round interview; it's the cert knowledge in your head that allows you to keep your job.

Do certifications for the knowledge, not the paper.

Agreed. I should have clarified. Knowledge wise it is still good information to learn.

infosecs

where can one find the splunk fundamentals 1 pdf?

infosecs

infosecs wrote: »

where can one find the splunk fundamentals 1 pdf?

I still can't find this pdf anywhere on their site. does anyone have it?

Jaydel.Leach

Hello all,
Last week I passed the online Splunk fundamentals 1 test on the Splunk website. My certification says "Splunk 7.x Fundamentals Part 1 (eLearning)." This may be a horrible question but Is there an additional test that you have to take at pearsonvue to say you are a certified user?

EANx

Repeating the link in post 37 https://www.splunk.com/en_us/training/certification-track/splunk-certification-program-relaunch.html

jibtech

Yes. The final quiz in the training is NOT the certification test. With the new certification program, you will have to take a closed book exam at a PearsonVue testing center. I will be taking one of the exams on Monday at Conf2018, so I can speak to it more once that is done.

Jaydel.Leach

Jibtech thank you for that. I will get ready for the closed book.

maljumaili

I didn't pass the closed book test, it was harder than I thought. If you're planing on taking it anytime soon then make sure you have Creating and Using Lookups/Transforming commands memorized; notwithstanding, it was well balanced (A piece from from each chapter).

u1tras

Can someboby recommend a good preparation course for Splunk Power User exam (not official for $2000)?

butters0_0

I just passed my Splunk Certified Core User Exam today (31 OCT 201

. It's not too bad but you'll need to remember a lot of the UI elements and the all the different options and steps in each modules that you learn from. Definitely download the PDF file from the course that has all the slides with additional information; doing the practice labs is also a good way to remember everything you learned. It took me 4 days to study for it so it's definitely doable.