SPLK-3001 — Splunk Enterprise Security Certified Administrator

IntermediateActive

Fee confirmed exact: $130/attempt, 48 MCQs, 60 minutes, delivered via Pearson VUE, no prerequisites. IMPORTANT: Splunk's own certification track page now labels this exam '(Legacy)' and lists three newer replacements - Splunk Certified Cybersecurity Defense Analyst, Defense Engineer, and Defense Architect. SPLK-3001 is still purchasable/active today but Splunk is clearly steering candidates to the new Cybersecurity Defense track; recommend a human decide whether to add the newer certs to the roadmap and/or flag SPLK-3001 as legacy in the UI. Confirmed 2026-09-26: splunk.com now shows a banner on this page reading 'This Splunk Certification has been reclassified as a Legacy Certification' (effective 2026-01-01 per Splunk's official 'Upcoming Splunk Certification Changes' FAQ PDF, linked from the same banner). Legacy Certifications remain valid and the exam can still be taken, but content is no longer updated. Also as of 2026-03-01 Splunk discontinued coursework-based recertification program-wide; renewal is now by retaking the exam (or a higher-level exam in the same track) within the final year of the 3-year validity window.

Issuer
Splunk
Industry
Cybersecurity
Domain
Security Architecture & Engineering
Level
Intermediate
Exam fee
$130 — July 2024 roadmap snapshot, unverified

Prerequisites & eligibility

None

Renewal & maintenance

Valid for 3 years. Renew by exam.

Related certifications

Plan SPLK-3001 in CertAscent → Official Splunk page →