Free SPLK-1002 practice exams are available here, covering all ten domains of the Splunk Core Certified Power User certification. Whether you are preparing for your first attempt or sharpening your knowledge before exam day, these questions are designed to reflect the style and difficulty of the real exam.
What SPLK-1002 covers
The Splunk Core Certified Power User exam tests your ability to work with advanced Splunk features beyond basic searching. The ten exam domains are:
- Using transforming commands for visualisations
- Filtering and formatting search results
- Correlating events with the transaction command
- Creating and managing field extractions
- Field aliases and calculated fields
- Tags and event types
- Macros
- Workflow actions (GET, POST, and Search)
- Data models
- The Common Information Model (CIM) add-on
The exam consists of 65 multiple-choice questions with a 57-minute time limit. A score of 70% is required to pass.
What's in these practice exams
Six full sets of 20 questions each give you 120 unique practice questions, all written to match the depth of the official exam. Questions are scenario-based, testing practical understanding rather than pure memorisation.
Topics covered across the sets include:
- When to use transaction vs stats for event correlation
- How field aliases and calculated fields work at search time
- Creating and invoking macros with arguments
- Configuring GET, POST, and Search workflow actions
- Building and querying data models with tstats
- Applying CIM normalisation using Technology Add-ons
- Using eval functions like coalesce(), strftime(), and case()
- Understanding data model acceleration and tsidx summaries
The first set is completely free, with no account required.
How to use these questions effectively
Work through each set in full before reviewing your answers. The SPLK-1002 is time-pressured, so practising under realistic conditions helps you build speed alongside accuracy.
Pay close attention to the explanations for questions you get wrong. Many SPLK-1002 questions test subtle distinctions, such as the difference between maxspan and maxpause in the transaction command, or when to use a field alias versus a calculated field. Understanding why an answer is correct matters more than memorising the answer itself.
Once you are consistently scoring above 80% across multiple sets, you are in strong shape for the real exam.