Deployment Architecture

MAXMIND Install Question

rmcdougal
Path Finder

Where do you need to install MAXMIND to gain functionality, the search head or the indexer?

Tags (1)
0 Karma

Greg_LeBlanc
Path Finder

You should install it on your Search Heads to gain the lookup functionality. The Search Heads will auto replicate the GEOIP lookups to your indexers.

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...