Changes
- Upgrade action:
LLM_BASE_URL must now be set explicitly in .env (there is no built-in LLM endpoint). Installations that left it unset no longer fall back to a default provider; the AI features stay off until it is set, or until a provider is configured on the settings page.
- End User License Agreement 1.4: it no longer mentions a default language-model endpoint, and it states that the license service is hosted in the Hong Kong Special Administrative Region of China (outside mainland China). Each user is asked to accept the new version at their next sign-in.
Security
- With field masking on (cloud or private mode), the alert subject (for example a user name) in one-line alert summaries and in triage scoring is now masked before it is sent to the language model. Previously a plain user name or host name could be sent unmasked.
Download and install
| File |
Description |
RST-Elastic-AI-Copilot-1.2.20.tar.gz |
Offline bundle (gateway image and deployment files; Community Edition without a license, Professional or Enterprise once one is imported) |
RST-Elastic-AI-Copilot-1.2.20.tar.gz.sha256 |
SHA-256 checksum |
sha256sum -c RST-Elastic-AI-Copilot-1.2.20.tar.gz.sha256
tar xzf RST-Elastic-AI-Copilot-1.2.20.tar.gz && cd RST-Elastic-AI-Copilot-1.2.20 && ./deploy.sh
Documentation: https://reallysec.com/en/docs/elastic-ai-copilot
中文说明
变更
- 升级须操作：
.env 中必须显式填写 LLM_BASE_URL（产品不再内置 LLM 端点）。未填写的安装不再回退到默认服务商，AI 功能在填写该项或在设置页配置服务商之前保持关闭。
- 《最终用户许可协议》更新为 1.4 版：不再提及默认大模型端点，并写明许可服务部署在中国香港特别行政区（中国大陆境外）。每位用户下次登录时需同意新版协议。
安全
- 开启字段脱敏（云端或私有模式）时，告警一句话摘要和告警研判中的告警主体（如用户名）在发送给大模型前会先脱敏。此前普通的用户名或主机名可能未经脱敏发出。
下载与安装
| 文件 |
说明 |
RST-Elastic-AI-Copilot-1.2.20.tar.gz |
离线一体包（网关镜像 + 部署文件；不导入许可为社区版，导入许可解锁专业版或企业版） |
RST-Elastic-AI-Copilot-1.2.20.tar.gz.sha256 |
SHA-256 校验文件 |
sha256sum -c RST-Elastic-AI-Copilot-1.2.20.tar.gz.sha256
tar xzf RST-Elastic-AI-Copilot-1.2.20.tar.gz && cd RST-Elastic-AI-Copilot-1.2.20 && ./deploy.sh
文档：https://reallysec.com/docs/elastic-ai-copilot
