Documentation

Documentation

From RST concepts to per-product setup guides — everything in one place.

Overview

What is RST?

RST Marketplace is a curated catalog of enterprise-grade Splunk apps. Every app ships with locally-verifiable signed licenses, hardware-bound activations, and a self-serve customer dashboard — so your install keeps working with or without an internet round-trip.

Licensing

How licensing works

On purchase you receive a license file signed with our app-specific RSA-PSS key. Your Splunk install verifies the signature locally and binds the activation to a hardware fingerprint (machine-id + NIC + hostname + arch, hashed). Renewals, revocations, and seat counts are managed from the customer dashboard.

# Verify a license file from the command line
$ rst-license verify ./aiquery.license
issued_to:    acme-corp
expires:      2027-04-30
nodes:        3 / 3
signature:    OK (RSA-PSS, 2048)
Quickstart

Quickstart

Install any RST app in three steps: drop the .spl into $SPLUNK_HOME/etc/apps, restart Splunk, then paste your license key into the app's setup screen. The app calls home once to fetch the signed license, then runs offline indefinitely.

1. cp <app>-<version>.spl $SPLUNK_HOME/etc/apps/
2. $SPLUNK_HOME/bin/splunk restart
3. Open AI Query Assistant -> Settings -> paste license key

Browse the marketplace.

Two Splunk apps live today: AI Query Assistant + Event Builder, both with a 14-day trial.