Splunk SPLK-2002 考試大綱：

主題	簡介
主題 1	Splunk Troubleshooting Methods and Tools: Designed for the Splunk Administrator, this domain provides understanding of available Splunk diagnostic tools and resources essential for identifying and resolving issues effectively.
主題 2	Clustering Overview: This section is intended for the Splunk Administrator and provides knowledge about search head clustering and related storage needs that are not smart store-specific. It introduces key concepts essential for managing clustered environments.
主題 3	Search Head Cluster Management and Administration: Designed for the Splunk Administrator, this section covers day-to-day operations such as managing the deployer, handling captaincy, and maintaining or removing search head members.
主題 4	Indexer Cluster Management and Administration: This section assesses the Splunk Administrator’s skills in managing indexer clusters, including monitoring, peer management, app bundle handling, and storage utilisation strategies.
主題 5	Introduction: This section of the exam measures the skills of the Enterprise Solutions Architect and covers the foundational understanding of planning and executing a Splunk deployment. It introduces key concepts, including the definition of deployment plans and outlines the overall process.
主題 6	Configuration Problems: This domain evaluates the Splunk Administrator's understanding of input configuration issues that may arise during deployment or log collection stages.
主題 7	Licensing and Crash Problems: This section assesses the abilities of the Splunk Administrator to identify and resolve issues related to licensing limits and platform crashes during deployment and daily operations.
主題 8	Infrastructure Planning: Index Design: Designed for the Enterprise Solutions Architect, this section addresses how to design and size indexes correctly. It also covers estimating storage requirements unrelated to smart store configurations and understanding relevant apps for deployment.
主題 9	Search Head Cluster: Targeted at the Enterprise Solutions Architect, this domain explores the architecture and configuration of search head clusters, necessary for scaling searches across large deployments.
主題 10	KV Store Collection and Lookup Management: This final section measures skills of the Splunk Administrator in managing KV Store collections within clustered Splunk environments, supporting dynamic data storage and lookup functionalities.
主題 11	Search Problems: Aimed at the Splunk Administrator, this section explores challenges related to search performance and introduces the Job Inspector tool to investigate query-related problems.
主題 12	Large-scale Splunk Deployment Overview: This domain measures the Enterprise Solutions Architect’s ability to design and manage Splunk server roles and configure license masters effectively in clustered environments.
主題 13	Single-site Indexer Cluster: Intended for the Enterprise Solutions Architect, this section introduces the key aspects of configuring a Splunk single-site indexer cluster, covering essential operational settings.
主題 14	Multisite Indexer Cluster: This domain is designed for the Enterprise Solutions Architect and provides knowledge of multisite cluster configurations, including upgrades, migration, and redundancy planning.
主題 15	Project Requirements: This section evaluates the competencies of the Splunk Administrator and focuses on identifying environment-specific needs such as user volume and technical requirements. It includes the use of checklists and available resources to ensure all deployment needs are clearly understood.
主題 16	Forwarder and Deployment Best Practices: Aimed at the Splunk Administrator, this section covers best practices for designing the forwarder tier and managing Splunk components using deployment tools. It emphasises effective configuration management.
主題 17	Infrastructure Planning: Resource Planning: This domain assesses the expertise of the Enterprise Solutions Architect and deals with sizing considerations, hardware specifications, and storage needs for different Splunk components. It also considers security, privacy, and specialised sizing for apps like ES and ITSI.

參考：https://www.splunk.com/en_us/training/certification-track/splunk-enterprise-certified-architect.html

Splunk SPLK-2002 考試概覽:

認證廠商:	Splunk
考試名稱:	Splunk Enterprise 認證架構師考試
考試代碼:	SPLK-2002
考試費用:	150 美元
考試形式:	單選題, 複選題, 情境式題目
支援語言:	英文
證照有效期限:	2 年
及格分數:	700 / 1000
考試時間:	90 minutes
相關認證:	Splunk Enterprise 認證管理員 Splunk Enterprise 認證工程師
實際考試題數:	85
推薦課程:	Splunk Enterprise 系統管理課程進階部署與設定課程
考試報名:	Pearson VUE 報名系統 Splunk 認證入口網站
範例考題:	Splunk SPLK-2002 範例考題
考試方式:	線上遠端監考或實體考場應試
必備條件:	須持有 Splunk Enterprise 認證管理員資格；建議具備大規模部署、叢集架構與系統管理經驗
官方大綱網址:	https://www.splunk.com/en_us/training/certification-track/splunk-enterprise-certified-architect.html