Where do I add a csv lookup file in a cluster?

[johnnythomson]

Hello, I would like to use a lookup csv file to add some info to some syslog data. I have several forwarders forwarding to a cluster environment and a couple of search heads. My question is where should I add the lookup file?

Thanks in advance

John

[pradeepkumarg]

The lookup file goes on to the search head..
More details here
docs.splunk.com/Documentation/Splunk/5.0/Knowledge/Addfieldsfromexternaldatasources

[johnnythomson]

Thankyou for the info