Official Exam Details

Splunk offers a Splunk Enterprise Certified Architect certification, which corresponds to the SPLK‑2002 exam.

The exam details are as follows:

Level: Expert

Length: 90 minutes

Number of Questions: 85 multiple-choice

Delivery: Administered via Pearson VUE

Cost: $130 USD per attempt.

This is the most authoritative and up-to-date information directly from Splunk as of now (2025).

Learning Path & Prerequisites

You must already hold the following two certifications:

Splunk Core Certified Power User

Splunk Enterprise Certified Admin

In addition, you are strongly encouraged to complete the following courses:

Architecting Splunk Enterprise Deployments

Troubleshooting Splunk Enterprise

Splunk Cluster Administration

Splunk Enterprise Deployment Practical Lab

Intended Audience

This certification is designed for professionals who:

Have hands-on experience with Splunk deployment, clustering, tuning, and troubleshooting

Understand distributed deployment architecture, including setting up indexer and search head clusters

Are capable of designing enterprise-scale Splunk implementations for medium to large organizations

Key Knowledge Areas (based on course content)

Splunk deployment topologies and architecture design

High availability and disaster recovery planning

Configuration and management of Search Head Clustering and Indexer Clustering

Performance tuning and monitoring

Core components like License Master, Deployment Server, etc.

Troubleshooting and log analysis skills