Skip to content

v2.0.11

Choose a tag to compare

View all tags
@sooua sooua released this 06 Oct 04:58
· 5 commits to main since this release
v2.0.11
52d57d5
  • Operations reports can now be in English: a report you generate follows the UI
    language, and scheduled reports use copilot.conf [reports] language (zh or en,
    default zh). Reports archived from 2.0.11 on open in the viewer's UI language; older
    archives show as before. Fixed duplicated section numbers in the Chinese report.
  • Search head clusters (Beta): each member keeps its own license state and activates as
    its own node; offline licenses are stored per member, and the License page shows
    whether the installed offline license belongs to this member. Online cluster members
    beyond the license's max_nodes now lock after upgrading (before, all members counted
    as one node): check max_nodes or move to Enterprise first. See INSTALL.md §4.1.
  • Host fingerprint recipe v2 (same as the license server SDK). Hosts already bound by
    the old fingerprint keep working with no re-activation: offline licenses, online
    sessions and sealed-feature keyrings all still accept it, and upgrading uses no extra
    node. Containers with no machine-id and no MAC get a persisted host id instead of
    failing.
  • An offline-activated license no longer contacts the license service at all (it used
    to download the revocation list once a day).
  • The license check no longer rewrites stored state on almost every request.
  • EULA 1.3: company-level terms aligned across the RST product family (liability cap,
    Chinese version prevails, subscription-term warranty, IP indemnity for paid editions,
    audit, export control, 30-day data export after termination, privacy and cross-border
    terms); the data-disclosure section now matches what the app actually sends.
  • Product name shown as "RST AI Copilot for Splunk" throughout the app, notifications
    and reports.

Download and install

File Use it for
RST-Splunk-AI-Copilot-2.0.11-selfcontained.spl Splunk Enterprise on your own servers (recommended); includes the agentic engine
RST-Splunk-AI-Copilot-2.0.11-fallback.spl Splunk Enterprise where compiled components are not allowed (Splunk Cloud is not supported yet)
*.spl.sha256 SHA-256 checksums
release-manifest.token Signed manifest read by the in-app online update (Settings → Version)

One package for every edition: without a licence it runs as the free Community Edition, and importing a licence under Settings → Activation unlocks Professional or Enterprise in place. Install in Splunk Web (Apps → Manage Apps → Install app from file) and restart, or on the search head:

sha256sum -c RST-Splunk-AI-Copilot-2.0.11-selfcontained.spl.sha256
tar xzf RST-Splunk-AI-Copilot-2.0.11-selfcontained.spl -C $SPLUNK_HOME/etc/apps/
$SPLUNK_HOME/bin/splunk restart

Documentation: https://reallysec.com/en/docs/splunk-ai-copilot · 中文文档：https://reallysec.com/docs/splunk-ai-copilot

Assets 7
Loading