-
released this
2026-04-21 20:28:52 +00:00 | 41 commits to main since this releaseWhat's New
AI Event Explanation
- New
POST /api/events/{id}/explainendpoint sends an audit event (plus up to 10 related events from the last 24h) to the LLM for a security-focused explanation. - The LLM explains what happened, who performed the action, whether it's typical or suspicious, any security implications, and recommended next steps.
- Available in the raw event modal — click Explain when viewing any event.
- Gracefully falls back when
LLM_API_KEYis not configured.
Copy Raw Event
- New Copy button in the raw event modal copies the full JSON to the clipboard.
Upgrade Notes
docker compose pull && docker compose up -dNo configuration changes required.
Downloads
- New