Is there an updated blueprint for Splunk Enterprise Security Certified Admin?

[acingolani1]

The latest Splunk Enterprise Security Certified Admin  blueprint maybe legacy.

Glass tables were not covered in Administering Splunk Enterprise Security course in 2022  and are not part of later version of ES,  but the current blueprint https://www.splunk.com/en_us/pdfs/training/splunk-test-blueprint-es-admin.pdf   shows to study for glass tables ??

Basically is there a better study guide?

[cert-team-admin]

Hi @acingolani1,

The blueprint is the true north for what will be on the exam and how to prepare for it. And yes, that is the most updated version. 

The courses are not tied to the exam, so there are various ways to study. 

You have our Splunk How-To Youtube Channel and Splunk Docs to reference as well. 

Hope this helps and good luck on the exam! 

[ACingo17]

Unfortunately,  for the Splunk Enterprise Security Certified Admin the blueprint shows to study for glasstables,  which  is not  on the actual class documentation.   The only way to study is to use the class documentation for the correct version of Enterprise Security

If you check revision history

Glass tables are no longer available in Enterprise Security version 6.6.0 or higher.

Whomever is in charge of blueprints should be matching the correct versons and correct class documentation.

This is just informational as I no longer need an answer

[richgalloway]

The document at that link is the most recent, as far as we know.  The exam is supposed to be based on the course so I'm surprised there are topics in the blueprint that were not in the class.  I suggest contacting Splunk at certification@splunk..com