Intermediate
Splunk Certified Cybersecurity Defense Analyst
Investigate threats and security events using Splunk Enterprise Security and SOC workflows.
66 questions · 75 minutes
No prerequisite exam is listed in the current official blueprint.
Splunk · Online-proctored exams
Splunk Cybersecurity Certifications
Compare Cybersecurity Defense Analyst, Engineer and Architect, with legacy security options clearly identified.
Certification directory
Browse Splunk Cybersecurity Certifications
Compare current qualifications first. Legacy exams remain separate options for a specific existing requirement.
5 exam options
Current certifications
Professional
Splunk Certified Cybersecurity Defense Engineer
Improve security data, detection engineering and automation across a Splunk-based defense environment.
60 questions · 75 minutes
No prerequisite exam is listed in the current official blueprint.
Design and improve Splunk security architectures that help organizations scale their defense capabilities.
67 questions · 75 minutes
No prerequisite exam is listed in the current official blueprint.
Legacy certifications — check your requirement
These exams remain available, but Splunk no longer updates their content. They are not interchangeable with the current certifications above.
Professional
Splunk Enterprise Security Certified Admin
Legacy · no content refresh
Review the legacy Enterprise Security administration credential for an existing platform requirement.
48 questions · 60 minutes
No prerequisite exam is listed in the current official blueprint.
Professional
Splunk SOAR Certified Automation Developer
Legacy · no content refresh
Review the legacy SOAR automation credential for playbooks and existing response workflows.
45 questions · 60 minutes
No prerequisite exam is listed in the current official blueprint.
No certifications match these filters.
Is this the right path?
Match the assessment to your role: investigate threats, engineer detections or design scalable security capabilities.
The three current Cybersecurity Defense exams list no prerequisite exams, but expected knowledge and experience increase by role. Legacy ES and SOAR exams remain separate choices for specific existing requirements.
Why CertWizard
Why Choose CertWizard for Certification and Exam Support
Choose an appropriate Splunk qualification, understand its requirements and agree the support you need before booking.
Support for your official exam
Get guidance on the process around your assessment. You prepare for and personally complete the official Splunk exam; the issuer determines the result.
Choose the right certification
The three current Cybersecurity Defense exams list no prerequisite exams, but expected knowledge and experience increase by role. Legacy ES and SOAR exams remain separate choices for specific existing requirements.
Prepare for online delivery
Use the current Cisco registration route, review the OnVUE rules and test your intended computer and network. Arrange a private room and acceptable identification before exam day.
Clear pricing and service terms
Sign in to view the support price, then confirm the service scope, voucher, materials and optional extras in writing. Review the service and refund terms before ordering.
Verify your official credential
Use your Cisco certification account and Credly records to check results, issued credentials and renewal dates. CertWizard does not issue Splunk certifications or control exam outcomes.
How it works
Three steps to your Splunk exam
Plan the route, prepare for the appointment and complete the official assessment yourself.
01
Choose and confirm
Check the qualification, prerequisites and current or legacy status. Agree the support and exact package inclusions before ordering.
02
Prepare and schedule
Study the blueprint, register through Cisco and arrange your appointment. Check your computer, room and identification against OnVUE requirements.
03
Take the official exam
Personally complete the supervised assessment. Review the result and any awarded credential through the issuer’s account services.
Before you apply
Questions about Splunk Cybersecurity Certifications
Can I take the offered exams online?
Online-proctored delivery is available through Pearson VUE OnVUE for eligible Cisco-program exams. Confirm the exact exam, country, language and appointment when booking. You need an approved computer, a private room and acceptable identification.
Check the current OnVUE requirements ↗Where do I register after the Cisco transition?
New registrations from 20 October 2026 use Cisco’s certification system. Previously booked Splunk appointments are honored through 1 March 2027; follow the instructions attached to your existing booking.
Cisco certification account ↗What does the CertWizard price cover?
It is a support-service price. Confirm the exact support, exam voucher, materials and optional extras in your written quote before ordering. Timing depends on preparation, prerequisites and available exam appointments.
How do legacy exams differ from current certifications?
ES Admin, SOAR Automation Developer and ITSI Admin are legacy certifications. Their exams remain available, but content is no longer updated. Choose a current route unless your role specifically calls for a legacy credential.
How do I keep my certification current?
Splunk certifications are valid for three years. Current renewal routes include retaking the same exam during the final year of validity or earning an eligible higher certification in the same track. Course-only renewal ended in March 2026. Check your individual record and the issuer’s current policy.
Read the official renewal policy (PDF) ↗Qualification sources checked 2026-11-02. Official Splunk information ↗
Outside our exam-only offer
Qualifications with mandatory labs
These existing guides remain available for reference. Their qualification routes require additional official training or practical work, so they are not included in our exam-package counts or pricing.
Plan your next step
Need help with Splunk Cybersecurity Certifications?
Tell us the qualification or skills you need, your current credentials and your deadline. We can discuss the appropriate route and available support.