


Exam: Splunk O11y Cloud Certified Metrics User
Exam Content
The following topics are general guidelines for the content likely to be included on the exam; however, other related topics may also appear on any specific delivery of the SPLK-4001 study guide exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
Splunk was founded in 2003 to solve problems in complex digital infrastructures. From the beginning, we’ve helped organizations explore the vast depths of their data like SPLK-4001 exam spelunkers in a cave (hence, “Splunk").
Splunk SPLK-4001 questions has evolved a lot in the last 20 years as digital has taken center stage and the types and number of disruptions have simultaneously escalated. With over 1,100 patents and a culture of innovation, we’ve stayed one step ahead of our customers’ needs. Today, many of the world’s largest and most complex organizations rely on Splunk to keep their mission-critical systems secure and reliable.
Our purpose is to build a safer and more resilient digital world. Every day, we live this SPLK-4001 course purpose by helping security, IT and DevOps teams keep their organizations securely up and running. When organizations have resilient digital systems, they can adapt, innovate and deliver for their customers.
Please follow these Practice Test Topics:
1.1 Splunk components
1.2 Understand the uses of Splunk
1.3 Define Splunk apps
1.4 Customizing user settings
1.5 Basic navigation in Splunk
2.1 Run basic searches
2.2 Set the time range of a search
2.3 Identify the contents of search results
2.4 Refine searches
2.5 Use the timeline
2.6 Work with events
2.7 Control a search job
2.8 Save search results
3.1 Understand fields
3.2 Use fields in searches
3.3 Use the fields sidebar
4.1 Review basic search commands and general search practices
4.2 Examine the search pipeline
4.3 Specify indexes in searches
4.4 Use the following commands to perform searches: tables, rename, fields, dedup, and sort
5.1 The top command
5.2 The rare command
5.3 The stats command
6.1 Save a search as a report
6.2 Edit reports
6.3 Create reports that display statistics (tables)
6.4 Create reports that display visualizations (charts)
6.5 Create a dashboard
6.6 Add a report to a dashboard
6.7 Edit a dashboard
7.1 Describe lookups
7.2 Examine a lookup file example
7.3 Create a lookup file and create a lookup definition
7.4 Configure an automatic lookup
7.5 Use the lookup in searches
8.1 Describe scheduled reports
8.2 Configure scheduled reports
8.3 Describe alerts
8.4 Create alerts
8.5 View fired alerts
Exam Preparation
Candidates may reference the Splunk How-To YouTube Channel, Splunk Docs, and draw from their own Splunk experience.
The following is a suggested and non-exhaustive list of training from the Core Certified User Learning Path that may cover topics listed in the above blueprint:
· Intro to Splunk
· Using Fields
· Scheduling Reports and Alerts
· Visualizations
· Working with Time
· Statistical Processing
· Leveraging Lookups and Subsearches
· Search Optimization