Splunk

Certified Consultant I 6.3

Overview:
As a Splunk Certified Consultant I, it is your job to contribute to and guide deployments with customers in a
post-sales capacity. As a Splunk Certified Consultant I you are expected to:
1. Have achieved three Splunk certifications: Power User, Admin, & Architect.
2. Execute deployment strategies following Splunk Professional Services best practices.
3. Design and implement Splunk for enterprise-level deployments; contributing to executing SOWs for
Splunk customers.

Objectives:
By achieving this certification you will to learn how to:
Effectively search and report using Splunk
Design and implement enterprise-level deployments.
Architect and deploy Splunk for customer SOW execution and support.
Target Audience:
This certification is available to:
Contracted Splunk Partners with valid Partner Portal IDs
Internal Splunk Employees

Level I vs. Level II Certification:
The Splunk Certified Consultant Level I program will provide the baseline knowledge required to function in the
field. The Consultant II program provides for a more in-depth, specific skills set in order to function in the field in
more of a specialized role. For Consultant II, the onsite training with the Splunk Professional Services team, is
the ultimate goal to prepare for this specialized role in the field. But, in order to earn a seat in that course, all of
the prior elements in the certification paths must be complete.

Being onsite with the customer day by day is a critical role. The goal of this certification program is to ensure
that you are effectively prepared depending on what your role is, not only for the technical aspects, but to help
with overall customer adoption and expansion.

SPLUNK CERTIFIED CONSULTANT I 6.3 (110216) 1

Overview of Steps to Complete Splunk Certified Consultant I:
To complete the level I certification you will:
Have already achieved Splunk Power User, Admin, & Architect certifications.
Attend and pass the Advanced Searching and Reporting course via Splunk education; this course is
instructor-led and does have a fee. Remember, you must complete all labs within the class to pass the
course.
Complete the following enablement courses via the portal, self-paced eLearning:
- Splunk Offerings
- Splunk Differentiators
- Intro to PS Best Practices
Request the Splunk Certified Consultant I test via certification@splunk.com. Take and pass the test. A
75% is required to pass.
Request the Splunk Certified Consultant I Practical Lab via certification@splunk.com . Certification will
verify that you have met and passed all prerequisites and you will then be provided and email with
detailed instructions on how to log into and execute the practical lab.


Time to Complete:
Approximately 22 hours:
13 hours to attend, complete, & pass the Advanced Searching and Reporting course
2 hours, or less, to complete the enablement courses listed above
1 hour to complete the test
6 hours to log into and execute the practical lab (*time to complete is factored into scoring of the
candidate)

SPLUNK CERTIFIED CONSULTANT I 6.3 (110216) 2


Certification Path Details (Splunk Certified Consultant I):

SPLUNK CERTIFIED CONSULTANT I 6.3

1: Prerequisites 2: Splunk Education Courses

2.1: Advanced
Searching &
Reporting

3: Enablement Courses (Free on Portal)

3.1: Splunk 3.2: Splunk 3.3: Intro to PS

Offerings Differentiators Best Practices

4: Online Test (Free via Portal) 5: Practical Lab

4.1: Splunk Certified 5.1: Splunk Certified

Consultant I 6.3 Consultant I
Online Test Practical Lab

Must be contracted Partner with Partner Portal ID or Splunker

LEGEND:
Conducted by Splunk Education Conducted by Splunk Professional Services Free Offered by Splunk Free modules
$ (education_amer@splunk.com) * MUST meet all pre-requisites before registration Certification - Free available on the Portal
All 6.x courses apply will be accepted (certification@splunk.com)

1116-6.3

SPLUNK CERTIFIED CONSULTANT I 6.3 (110216) 3

Frequently Asked Questions:

Q: Im having trouble with my partner portal log in. Where can I get help?
A: Email partner+@splunk.com or check with your Splunk Partner Manager.

Q: How are the Splunk Education courses conducted?

A: Our Splunk Education team conducts these courses; details can be found at education.splunk.com.

Instructor-led virtual classes. These classes are conducted virtually via WebEx. They include a live instructor,
other students and lab environment. During the classes you will have lecture and lab exercises. Your lab work is
scored upon completion of the class. You must complete and pass the lab exercises to receive credit for the
course towards your certification.

Q: There seems to be overlap between these certifications and other certifications. If I have other
certifications, do I get credit for the work done already?
A: Certainly! The overlap exists to ensure that everyone in the pre and post sales cycle are working in tandem
providing consistent messaging. If you have already taken the Splunk Education courses, they will apply for this
certification as well. You can send questions to certification@splunk.com.

Q: What other certifications are available?
A: Check out the Certification bucket on the partner portal for program details.

Q: For how long is my certification valid?

A: Until we determine an update is necessary. With each software release we will determine if a re-certification
is necessary. If so, an update path will be provided. We will not expire your certification on an arbitrary
timeframe.

SPLUNK CERTIFIED CONSULTANT I 6.3 (110216) 4