Is there a way to take only the certification exams, and not go through their classes? I saw a blog post that seemed to suggest so (can't add link as I'm not allowed yet), but I don't see that mentioned in Splunk's website.
Going through each of the certification classes would add up to the expense, when I'm already familiar with the course material.
Question regarding log files that are required for indexes created in the architecture exam.
If you we need to index data from the example.xml file and their many other *.log files not need for the required index.
Would there be points deducted from the exam grade if the unnecessary *.logs removed from the directory with the example.xml file?
The following certifications offer 'equivalent on-the-job experience' in lieu of the classes. This is defined as 2 years of field experience; Splunk Certified Knowledge Manager and Splunk Certified Admin. However, the classes are strongly recommended. In addition, be aware these certifications are based on Version 6. So, it is important that you understand data models, pivot and other new V.6 features. You can take the What's New in Splunk 6 class to catch up on the new features.
Also note, you can attain credit for pre version 6 classes you have already completed by taking the What's New in Splunk 6 class and test. No need to retake classes you have already completed. But, it is wise to update them.
As a cautionary note, we do NOT allow 'equivalent on-the-job experience' for the Splunk Certified Architect program. For that certification, all your lab work in the pre-requisite classes is graded along with the Splunk Certified Architect lab. The lab cannot be an all encompassing test. So, if your end goal is Architect certification you will need to take all the classes.
Certification questions can be addressed to firstname.lastname@example.org.
Karen Hodges Global Certification Program Manager - Splunk
@lukejadamec, awesome, thanks. That was exactly what I wanted to understand. So, per that link, the exams themselves are free? Also, once they send us the link for the test, ido they also provide a specific date that we have to take it on?
I've taken both the Knowledge Manager exam and Admin exam without taking the courses. In order to take the Admin exam you have to pass the Knowledge Manager exam. To request the exam you have to email Splunk as mentioned on this site:
I wouldn't think so, but the prerequisites listing for just the class is a bit shaky so I wouldn't say for sure. You could contact @lguinn on Splunk Answers, she should know all about Splunk education there is to know.