Skip to content

v2.0.16

Choose a tag to compare

@sooua sooua released this 09 Oct 08:19
· 1 commit to main since this release
  • New Splunkbase package RST-AI-Copilot-for-Splunk-<version>-splunkbase.spl. Its
    in-app updater is off; update it through Splunk's Apps > Manage Apps. The updater is
    controlled by [update] enabled in copilot.conf, so admins of a GitHub install can
    also turn it off with enabled = 0 in local/copilot.conf.
  • Ticketing (Jira Data Center): wiki markup in alert data (strike-through, underline,
    superscript, subscript, images, headings, and lines that would close a code block) is
    now shown as plain text instead of being rendered, and dates and hostnames no longer
    show stray backslashes.
  • License page: non-admin users see the admin-only notice on first load instead of a
    backend error.
  • An offline license bound to another host now says so and points to Settings → License,
    and English license messages name the real Settings → License page.

Download and install

File Use it for
RST-AI-Copilot-for-Splunk-2.0.16-selfcontained.spl Splunk Enterprise on your own servers (recommended); includes the agentic engine
RST-AI-Copilot-for-Splunk-2.0.16-fallback.spl Splunk Enterprise where compiled components are not allowed (Splunk Cloud is not supported yet)
RST-AI-Copilot-for-Splunk-2.0.16-splunkbase.spl The fallback package as listed on Splunkbase: in-app update off, Splunk offers new versions under Manage Apps
*.spl.sha256 SHA-256 checksums
release-manifest.token Signed manifest read by the in-app online update (Settings → Version)

One package for every edition: without a licence it runs as the free Community Edition, and importing a licence under Settings → License unlocks Professional or Enterprise in place. Install in Splunk Web (Apps → Manage Apps → Install app from file) and restart, or on the search head:

sha256sum -c RST-AI-Copilot-for-Splunk-2.0.16-selfcontained.spl.sha256
tar xzf RST-AI-Copilot-for-Splunk-2.0.16-selfcontained.spl -C $SPLUNK_HOME/etc/apps/
$SPLUNK_HOME/bin/splunk restart

Documentation: https://reallysec.com/en/docs/splunk-ai-copilot · 中文文档:https://reallysec.com/docs/splunk-ai-copilot