SPLK-1003 is an administration exam, not a search exam, and its seventeen topics are flat enough that nothing can be safely skipped. The full weighting map, and the ingestion cluster most study plans miss.
Splunk Enterprise Admin Exam Topics: Seventeen, and None Above Ten Percent
