The following content areas are general guidelines for the content to be included on the exam.
● Prototyping
● Using tokens
● Improving performance
● Customizing views
● Using event handlers
● Adding simple XML extensions
● Introduction to Splunk apps
● Planning app development
● Adding data
● Creating apps
● Creating SplunkJS views
● Creating a KV store
● Using the Splunk REST API
● Packaging apps
● Calling Splunk REST endpoints with curl
● Embedding calls to REST endpoints
The following topics are general guidelines for the content likely to be included on the exam; however,
other related topics may also appear on any specific delivery of the exam. In order to better reflect the
this course cover these topics
1.0 Use Forms 5%
1.1 Explain how tokens work
1.2 Define types of token filters
2.0 Improve Performance 5%
2.1 Use the tstats command
2.2 Use global searches
3.0 Customize Dashboards 5%
3.1 Customize panel link buttons
3.2 Set panel refresh and delay times
4.0 Use Event Handlers 5%
4.1 Identify types of event handlers
4.2 Describe event actions
5.0 Add Drilldowns 5%
5.1 Define types of drilldowns
5.2 Identify predefined tokens
6.0 Add Advanced Visualizations & Behaviors 5%
6.1 Describe simple XML extensions
6.2 Describe Splunk Custom Visualizations
7.0 Planning App Development 10%
7.1 Describe ways to monitor app performance
7.2 Identify useful Splunk log files
7.3 Describe security best practices
8.0 Creating Apps 5%
8.1 Define the app directory structure
8.2 Describe app permissions
9.0 Adding Data 5%
9.1 List types of data inputs
9.2 Describe add-ons
10.0 Creating a KV Store 5%
10.1 Define what is a KV Store
10.2 Describe KV Store lookup
10.3 Create a KV Store collection
10.4 Search a KV Store collection
10.5 Update content in a KV Store collection
10.6 Delete a KV Store collection
11.0 Packaging Apps 5%
11.1 Describe the difference between local and default directories
12.0 Introduction to the Splunk REST API 5%
12.1 Describe the REST URI format
12.2 Identify which Splunk server to connect to (e.g., search head, indexer, forwarder)
12.3 Identify where REST logging occurs
12.4 Describe authentication methods
13.0 Namespaces and Object Management 10%
13.1 Describe namespaces and why they matter
13.2 Describe how the servicesNS is used with namespaces and REST endpoints
13.3 Describe access control lists
13.4 Update access control lists
14.0 Parsing REST Output 5%
14.1. Describe how the Splunk REST API uses Atom Syndication
14.2. Describe the entry element
14.3. Describe the content element
14.4. Describe how to control the output format
15.0 Searching 10%
15.1 Describe the importance of specifying fields in a search
15.2 Describe options for specifying a search time range
15.3 Describe blocking, oneshot, normal, and export searches
15.4 Describe search jobs
15.5 Create and manage search jobs
15.6 Describe ways to improve search performance
16.0 Writing Data to Splunk 10%
16.1. Identify some options that are available when creating an index
16.2. Create and manage indexes
16.3. Describe the Splunk HTTP Event Collector (HEC)
16.4. Describe HEC tokens and how they are used
16.5. Describe indexer acknowledgement
16.6. Create and use HEC tokens to get data into Splunk
Who this course is for:
- All Levels
How to Enroll Splunk Certified Developer Practice Test 2021 course?
How many members can access this course with a coupon?
Splunk Certified Developer Practice Test 2021 Course coupon is limited to the first 1,000 enrollments. Click 'Enroll Now' to secure your spot and dive into this course on Udemy before it reaches its enrollment limits!
