Deployment Architecture

Is there ova available for POC on esxi?

mc581w
New Member

Hi. I'm trying to set up a simple Proof of Concept in an ESXi environment.
I found a .ova for download but it doesn't appear equal to Enterprise. Am I missing something?

Can I use the available .ova to test an indexer, basic search and a universal forwarder? Or, do I need to stand up a Linux VM and download the 60-day Enterprise package?

Thanks

0 Karma

mc581w
New Member

I'll try to answer my question. I tried this both ways, using the available .ova and a fresh enterprise installation on ubuntu. The .ova is a heavy forwarder, not enterprise installation. The confusing part to a noob is the ui looks the same. So close that i was able to setup a receiver but never got it to work, even though it showed up as listening locally. After deploying the enterprise package I followed the steps and the receiver is listening and reachable.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...