XPLG Audity - AI Identity Intelligence: Insider Risk

Audity Audity brings AI identity intelligence, audit and compliance: it correlates identity activity across the collected sources, highlights anomalous access and produces audit-ready evidence. On 8.2 it is licensed per identity and shares the node, data paths and AI credits with the rest of the X8 stack, so enabling it is a license change, not a new deployment.

General XPLG X8 8.2.0 moves the AWS Marketplace listing to the X8 container platform: one image, five products, one license model and one workspace. The AMI runs the same xplg-service Compose stack used on Docker, Podman, Kubernetes and VMs, so a Marketplace node behaves exactly like any other X8 node - same roles (master, server, processor), same .env, same Traefik edge on 80/443, and the same path from a single node to a cluster of two to six servers. The instance pulls the current 8.2 patch on every boot, so patches reach you without a new AMI; only major versions require a new listing version. Console on :30304/logeye/ (or :80/:443 via Traefik); node data on the instance's local NVMe/SSD, shared configuration optionally on EFS.

Security updates The platform runs as a non-root service (uid 30303, gid 0) on Amazon Linux 2023 with OS security patches applied at build and at boot. No default credentials ship with the image: security is activated on first sign-in, and every instance generates its own identity. The host exposes only the role ports (30304-30308 HTTP, 30444-30448 HTTPS, 80/443 with Traefik, 514 for syslog sources) and no SSH keys or registry credentials are present in the AMI. Deployments register to your XPLG Dock workspace so licenses, usage and support tickets are tied to the node that produced them.

AI native 8.2 is the first X8 release with the AI layer built into the base image rather than added per product. Every workspace receives XMC (XPLG Model Credits) with its evaluation license, metered against the same usage view as GB/day and streams. LogX anomaly detection, Audity identity intelligence and the in-console assistant all draw on this layer, and the same credits follow the deployment from evaluation to production.

Flux Flux delivers ultra-fast file sync and streaming between clouds and on-prem storage, now available on AWS as a licensed product in the X8 image. Use it to move raw logs, archives and model artifacts between S3, other clouds and the node's local disk at line rate, with the transfer metered per stream alongside the other X8 products.

PortX PortX is the data streams pipeline control plane for observability and security: collect, control, reduce, secure. In 8.2 it runs as a role in the X8 stack, so a single node can ingest, reduce and route to downstream SIEMs and observability backends while sharing configuration with the rest of the platform. Licensing is GB/day; the node reports consumption to your Dock workspace.

XpoLog XpoLog provides log management and analysis - augmented search, monitoring and apps - on the X8 platform. 8.2 brings the updated console (/logeye/), the Traefik-fronted entry on standard ports and the shared-configuration directory, so search apps, dashboards and monitors created on one node are available across the cluster.

LogX LogX adds AI anomaly detection, clustering and pattern discovery on top of ingested logs. In 8.2 it runs on the platform's AI layer and XMC credits, exposing detected patterns and anomalies in the XpoLog console and as events for PortX routing. No separate model deployment is required; models are included in the image.

Audity Audity brings AI identity intelligence, audit and compliance: it correlates identity activity across the collected sources, highlights anomalous access and produces audit-ready evidence. On 8.2 it is licensed per identity and shares the node, data paths and AI credits with the rest of the X8 stack, so enabling it is a license change, not a new deployment.

Need from engineering before publishing: exact feature deltas vs 8.1 per product, any schema/config migrations, known issues, and the minimum instance size you want stated (16 GB RAM evaluation / 32-128 GB production per dock).