Deployment Architecture

Is there ova available for POC on esxi?

mc581w
New Member

Hi. I'm trying to set up a simple Proof of Concept in an ESXi environment.
I found a .ova for download but it doesn't appear equal to Enterprise. Am I missing something?

Can I use the available .ova to test an indexer, basic search and a universal forwarder? Or, do I need to stand up a Linux VM and download the 60-day Enterprise package?

Thanks

0 Karma

mc581w
New Member

I'll try to answer my question. I tried this both ways, using the available .ova and a fresh enterprise installation on ubuntu. The .ova is a heavy forwarder, not enterprise installation. The confusing part to a noob is the ui looks the same. So close that i was able to setup a receiver but never got it to work, even though it showed up as listening locally. After deploying the enterprise package I followed the steps and the receiver is listening and reachable.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...