My main question is, if i provision 8 post multi-threaded cores and have 8 GB of Ram on a virtual machine, Will my ES App/Install not run?
The Splunk App for Enterprise Security may not run on virtualized machines with insufficient hardware. (SOLNESS-1118)
Running Splunk Enterprise on Windows on under-provisioned virtualized hardware may cause Enterprise Security setup to fail. If you have well-provisioned hardware, retry the setup if it fails the first time. (SOLNESS-4256)