Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Splunk
Exam Format
60 min
53
70%
Professional
Registration
$130 USD
Pearson VUE or online proctoring
English
Validity
3 years
Pass a higher-level Splunk certification exam; Pass the current version of the same exam before expiration; Complete continuing education requirements
SPLK-3002 Exam Topics and Domains
SPLK-3002 is organized into 16 weighted domains. Expect to work with Event Analytics, Glass Table Editor, Multi-KPI Alert Engine, Service Analyzer, and more.
1
Introducing ITSI
5%
ITSI Fundamentals
Identify what ITSI doesDescribe reasons for using ITSIExamine the ITSI user interface
- Understand ITSI core functionality and purpose
- Navigate the ITSI interface effectively
- Identify key ITSI components and their uses
2
Glass Tables
10%
Glass Table Fundamentals
Describe glass tablesUse glass tables
- Understand glass table architecture and purpose
- Use glass tables for service monitoring
Glass Table Configuration
Design glass tablesConfigure glass tables
- Design effective glass tables
- Configure visualizations and widgets
- Implement interactive features
3
Managing Notable Events
10%
Notable Events Concepts
Define key notable events terms and their relationshipsDescribe examples of multi-KPI alerts
- Understand notable event framework
- Configure multi-KPI alerts
- Manage event lifecycle
Notable Events Workflow
Describe the notable events workflowWork with notable eventsCustom views
- Manage notable event lifecycle
- Create custom event views
- Implement event workflows
4
Investigating Issues with Deep Dives
10%
Deep Dive Concepts
Describe deep dive concepts and their relationshipsUse default deep dives
- Understand deep dive architecture
- Use deep dives for troubleshooting
Custom Deep Dives
Create and customize new custom deep divesAdd and configure swim lanesDescribe effective workflows for troubleshooting
- Create custom deep dives
- Configure swim lanes effectively
- Implement troubleshooting workflows
5
Installing and Configuring ITSI
10%
ITSI Deployment
List ITSI hardware recommendationsDescribe ITSI deployment optionsIdentify ITSI components
- Plan ITSI deployment
- Understand hardware requirements
- Identify deployment components
ITSI Installation and Data
Describe the installation procedureIdentify data input options for ITSIAdd custom data to an ITSI deployment
- Install ITSI successfully
- Configure data inputs
- Integrate custom data sources
6
Designing Services
5%
Service Design Planning
Given customer requirements, plan an ITSI implementationIdentify site entities
- Plan service implementations
- Design service hierarchies
- Identify and manage entities
7
Data Audit and Base Searches
10%
Data Audit Process
Use a data audit to identify service key performance indicators
- Perform data audits
- Identify KPIs from data
Base Search Design
Design base searches
- Design efficient base searches
- Optimize search performance
8
Implementing Services
10%
Service Implementation
Use a service design to implement services in ITSI
- Implement services from design
- Configure service properties
9
KPI Configuration
10%
KPI Creation and Thresholds
Create KPIs with static and adaptive thresholdsUse time policies to define flexible thresholds
- Create and configure KPIs
- Implement various threshold types
- Configure time policies
10
Entities and Modules
5%
Entity Management
Importing entitiesUsing entities in KPI searches
- Import and manage entities
- Use entities in KPI configuration
Module Usage
Using modules
- Deploy and configure modules
- Use content packs effectively
11
Templates and Dependencies
5%
Service Templates
Use templates to manage services
- Create and manage service templates
- Apply templates to services
Service Dependencies
Define dependencies between services
- Configure service dependencies
- Understand dependency impact on health scores
12
Anomaly Detection
5%
Anomaly Detection Configuration
Enable anomaly detectionWork with generated anomaly events
- Configure anomaly detection
- Manage anomaly events
- Tune detection sensitivity
13
Correlation and Multi KPI Searches
5%
Correlation Searches
Define new correlation searchesDefine multi KPI alertsManage notable event storage
- Create correlation searches
- Configure multi-KPI alerts
- Manage event storage
14
Aggregation Policies
5%
Aggregation Policy Configuration
Create new aggregation policiesUse smart mode
- Create aggregation policies
- Configure smart mode
- Optimize event aggregation
15
Access Control
5%
User Access Management
Configure user access controlCreate service level teams
- Configure access controls
- Manage teams and permissions
- Implement security best practices
16
Administration and Maintenance
5%
Backup and Maintenance
Backup and restoreMaintenance mode
- Perform backup and restore
- Configure maintenance windows
Advanced Administration
Creating modulesTroubleshooting
- Create custom modules
- Troubleshoot ITSI issues
- Perform system maintenance
How do I earn this certification?
Passing SPLK-3002 earns the Splunk IT Service Intelligence Certified Admin certification. It sits in the IT Service Intelligence track.
Next Level Options
- SPLK-4001 - Splunk Core Certified Consultant
- SPLK-3001 - Splunk Enterprise Security Certified Admin
Alternative Paths
- SPLK-3001 - Splunk Enterprise Security Certified Admin Complementary security monitoring skills
- SPLK-2001 - Splunk Certified DeveloperCustom app and integration development
- SPLK-3003 - Splunk Core Certified Advanced Power UserAdvanced search and dashboard skills
- SPLK-5001 - Splunk O11y Cloud Certified Metrics UserCloud observability and metrics monitoring
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for SPLK-3002.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-06-16
Updates
- Glass Tables Beta to GA Increased focus on glass table configuration in exam • Release date: 2024-03-01
- Service Analyzer Enhanced UI New navigation patterns may be tested • Release date: 2024-06-01
- KPI Base Searches Performance Optimized Best practices for base search design emphasized • Release date: 2024-04-15
Who should take this exam?
This exam is typically taken by Splunk platform administrators and IT operations professionals.
- Working knowledge and experience as either Splunk Cloud or Splunk Enterprise Administrator
- At least 6 months of hands-on Splunk experience
- Understanding of IT service management principles
- Experience with IT operations and monitoring