Skip to content

v2.0.9

Choose a tag to compare

@sooua sooua released this 05 Oct 17:56
· 5 commits to main since this release
  • Fallback package (Windows / ARM search heads): the | copilot and | splexplain
    search commands now work. Before, they failed to load.
  • | splexplain shows the real error, for example an AI model that is not configured
    yet, instead of "External search command exited unexpectedly".

Download and install

File Use it for
RST-Splunk-AI-Copilot-2.0.9-selfcontained.spl Splunk Enterprise on your own servers (recommended); includes the agentic engine
RST-Splunk-AI-Copilot-2.0.9-fallback.spl Splunk Enterprise where compiled components are not allowed (Splunk Cloud is not supported yet)
*.spl.sha256 SHA-256 checksums
release-manifest.token Signed manifest read by the in-app online update (Settings → Version)

One package for every edition: without a licence it runs as the free Community Edition, and importing a licence under Settings → Activation unlocks Professional or Enterprise in place. Install in Splunk Web (Apps → Manage Apps → Install app from file) and restart, or on the search head:

sha256sum -c RST-Splunk-AI-Copilot-2.0.9-selfcontained.spl.sha256
tar xzf RST-Splunk-AI-Copilot-2.0.9-selfcontained.spl -C $SPLUNK_HOME/etc/apps/
$SPLUNK_HOME/bin/splunk restart

Documentation: https://reallysec.com/en/docs/splunk-ai-copilot · 中文文档:https://reallysec.com/docs/splunk-ai-copilot