Splunk Certified Architect Practice

The Splunk Enterprise Certified Architect exam is the final step towards the completion of the Splunk Enterprise Certified Architect certification. This highly technical certification exam is an 87-minute, 90-question assessment that evaluates a candidate’s knowledge and skills in Splunk Deployment Methodology and best practices for planning, data collection, and sizing, managing, and troubleshooting a standard with indexer and search head clustering. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 90 minutes.

Topics Include:

1.0 Introduction 2%

2.0 Project Requirements 5%

3.0 Infrastructure Planning: Index Design 5%

4.0 Infrastructure Planning: Resource Planning 7%

5.0 Clustering Overview 5%

6.0 Forwarder and Deployment Best Practices 6%

7.0 Performance Monitoring and Tuning 5%

8.0 Splunk Troubleshooting Methods and Tools 5%

9.0 Clarifying the Problem 5%

10.0 Licensing and Crash Problems 5%

11.0 Configuration Problems 5%

12.0 Search Problems 5%

13.0 Deployment Problems 5%

14.0 Large-scale Splunk Deployment Overview 5%

15.0 Single-site Indexer Cluster 5%

16.0 Multisite Indexer Cluster 5%

17.0 Indexer Cluster Management and Administration 7%

18.0 Search Head Cluster 5%

19.0 Search Head Cluster Management and Administration 5%

20.0 KV Store Collection and Lookup Management 3%