Skip to content

v2.0.13

Choose a tag to compare

View all tags
@sooua sooua released this 07 Oct 15:35
· 3 commits to main since this release
v2.0.13
761c256
  • Scheduled report push: a report missed while Splunk was down is pushed once when it
    comes back. Pushes configured before 2.0.13 start catching up from the first push
    after the upgrade, so the upgrade itself never sends two reports at once.
  • Alert push cards follow the report language setting.
  • An unknown push time zone is now reported as an error instead of silently falling
    back to UTC.
  • Generic webhook payloads use the same field names in every language; only the card
    text is translated. If you parsed the English field names that English-mode report
    webhooks sent in 2.0.12 ("Period", "AI calls" and so on), switch back to the fixed
    field names.
  • License page: on a search head cluster member refused by the node limit, and on an
    offline license file without feature keys, features that cannot run on this host are
    shown as locked and are no longer counted as unlocked.
  • License page: "expiring soon" now appears 7 days before expiry instead of 30.
  • More license errors are shown in the interface language.
  • Accepting the EULA right after a Splunk restart no longer fails while the KV store is
    still starting; the dialog asks you to retry.
  • The EULA dialog can switch the agreement text between Chinese and English.
  • License service rate limits (HTTP 429) are retried after 5–30 minutes, staggered per
    host, instead of waiting a day.

Download and install

File Use it for
RST-Splunk-AI-Copilot-2.0.13-selfcontained.spl Splunk Enterprise on your own servers (recommended); includes the agentic engine
RST-Splunk-AI-Copilot-2.0.13-fallback.spl Splunk Enterprise where compiled components are not allowed (Splunk Cloud is not supported yet)
*.spl.sha256 SHA-256 checksums
release-manifest.token Signed manifest read by the in-app online update (Settings → Version)

One package for every edition: without a licence it runs as the free Community Edition, and importing a licence under Settings → Activation unlocks Professional or Enterprise in place. Install in Splunk Web (Apps → Manage Apps → Install app from file) and restart, or on the search head:

sha256sum -c RST-Splunk-AI-Copilot-2.0.13-selfcontained.spl.sha256
tar xzf RST-Splunk-AI-Copilot-2.0.13-selfcontained.spl -C $SPLUNK_HOME/etc/apps/
$SPLUNK_HOME/bin/splunk restart

Documentation: https://reallysec.com/en/docs/splunk-ai-copilot · 中文文档：https://reallysec.com/docs/splunk-ai-copilot

Assets 7
Loading