Splunk · 2026 Edition
A complete preparation guide, edited by Johnson Ajibi, a network and security engineer with 12+ years' experience. Covers the exam format,all 6 blueprint domains, a week-by-week study plan, and proven tips for passing first time.
2–4 months
Prep time
Intermediate
Difficulty
70
Exam questions
Exam code
SPLK-1004
Full name
Splunk Core Certified Advanced Power User (SPLK-1004)
Vendor
Splunk
Duration
60 minutes
Questions
70 items
Domains covered
6 blueprint domains
Recommended experience
Foundational IT knowledge recommended
Typical prep time
2–4 months
Domain percentage weights are not currently available for this exam. The checklist below is still useful for planning your study.
Phase 1
Lookups And Alerts
Tip: Start with the official Lookups And Alerts objectives, then practise questions on it.
Phase 2
Data Models And CIM
Tip: Cover the Data Models And CIM objectives, then answer practice questions to confirm you can apply them.
Phase 3
Field Management And Calculated Fields
Tip: Cover the Field Management And Calculated Fields objectives, then answer practice questions to confirm you can apply them.
Phase 4
Transforming Commands And Formatting
Tip: Cover the Transforming Commands And Formatting objectives, then answer practice questions to confirm you can apply them.
Phase 5
Macros And Workflow Actions
Tip: Cover the Macros And Workflow Actions objectives, then answer practice questions to confirm you can apply them.
Phase 6
Search Tuning Performance And Dashboards
Tip: Finish with Search Tuning Performance And Dashboards, then re-test your weakest earlier domain before a mock exam.
Study the official exam blueprint — weight percentages tell you exactly where to invest prep time.
Practise scenario-based questions regularly — every modern cert exam is scenario-heavy.
Use spaced repetition to retain what you've learned (Courseiva does this automatically).
Book your exam date once you're scoring 80%+ consistently on practice tests.
Review explanations for every wrong answer, not just the question — the 'why' is what makes it stick.
Apply everything in this guide with adaptive practice questions, detailed answer explanations, and domain analytics.