Apr 30, 2026 — Geographic data updated

The clientIP address connecting to Akamai is now used for all geographic data sent in SIEM. This change deprecates the use of XFF for geo lookup and applies equally to all integration options, including API and DataStream.

Recommended action

No update to the CEF or Splunk client software is needed.