Deployment Architecture

Is there ova available for POC on esxi?

mc581w
New Member

Hi. I'm trying to set up a simple Proof of Concept in an ESXi environment.
I found a .ova for download but it doesn't appear equal to Enterprise. Am I missing something?

Can I use the available .ova to test an indexer, basic search and a universal forwarder? Or, do I need to stand up a Linux VM and download the 60-day Enterprise package?

Thanks

0 Karma

mc581w
New Member

I'll try to answer my question. I tried this both ways, using the available .ova and a fresh enterprise installation on ubuntu. The .ova is a heavy forwarder, not enterprise installation. The confusing part to a noob is the ui looks the same. So close that i was able to setup a receiver but never got it to work, even though it showed up as listening locally. After deploying the enterprise package I followed the steps and the receiver is listening and reachable.

0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...