The app comes complete with everything you need. The search head will need an Internet connection to access the tile servers to render the map. Install is the same as any other Splunk app. You can install through the UI, deployment server, search head cluster master, CLI... My guess is you're running into issues since you're not connected to the Internet.
You can use Splunk’s map tiles, but they don’t work well since they lack fidelity as you zoom in. They only goes to zoom level 7. Anything beyond that is just greyed out since there are no tiles. They work well for Splunk’s default maps since it’s just using geostats and high level aggregate data to provide a pie chart. Maps+ gives you individual point detail and requires greater fidelity to be useful.
Here’s the setting to plug into the Map Tile Override format menu option to use Splunk’s tiles.
http://:8000/en-US/splunkd/__raw/services/mbtiles/splunk-tiles/{z}/{x}/{y}
It’s possible to use an offline tile server, but it’s something you’d need to host yourself and it isn’t trivial to setup and requires a lot of compute resources. There are a lot of guides out there on how to do it. Here’s one such guide.
https://switch2osm.org/serving-tiles/
To sum it up, there really isn’t a great solution for offline use.
