﻿---
title: Enable large language model (LLM) access
description: Elastic Security uses large language models (LLMs) for some of its advanced analytics features. To enable these features, you can connect a third-party...
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/set-up-connectors-for-large-language-models-llm
products:
  - Elastic Cloud Serverless
  - Elastic Security
---

# Enable large language model (LLM) access
Elastic Security uses large language models (LLMs) for some of its advanced analytics features. To enable these features, you can connect a third-party LLM provider or a custom local LLM.
<important>
  Different LLMs have varying performance when used to power different features and use-cases. For more information about how various models perform on different tasks in Elastic Security, refer to the [Large language model performance matrix](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/large-language-model-performance-matrix).
</important>


## Elastic Managed LLM

[Elastic Managed LLM](https://www.elastic.co/docs/reference/kibana/connectors-kibana/elastic-managed-llm) is the default large language model (LLM) connector available in the AI Assistant for eligible users. It provides immediate access to generative AI features without requiring any setup or external model integration.
The Elastic Managed LLM is available out-of-the box; no manual connector setup or API key management is required for initial use. However, you can configure and use a third-party LLM connector, such as OpenAI, Azure, or Amazon Bedrock if you prefer.
To learn more about security and data privacy, refer to the [connector documentation](https://www.elastic.co/docs/reference/kibana/connectors-kibana/elastic-managed-llm) and [download the model card](https://raw.githubusercontent.com/elastic/kibana/refs/heads/main/docs/reference/resources/Elastic_Managed_LLM_model_card.pdf).
<important>
  Using the Elastic Managed LLM incurs additional costs. Refer to [Elastic Cloud pricing](https://www.elastic.co/pricing/serverless-search) for more information.
</important>


## Connect to a third-party LLM

Follow these guides to connect to one or more third-party LLM providers:
- [Azure OpenAI](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/connect-to-azure-openai)
- [Amazon Bedrock](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/connect-to-amazon-bedrock)
- [OpenAI](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/connect-to-openai)
- [Google Vertex](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/connect-to-google-vertex)


## Connect to a self-managed LLM

The following guides describe how to connect to a custom LLM deployed and managed by you:
- For production environments or air-gapped environments, you can [connect to vLLM](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/connect-to-vLLM).
- For experimental deployments, you can [connect to LM Studio](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4326/solutions/security/ai/connect-to-own-local-llm).


## Preconfigured connectors

```
stack: ga 9.0
serverless: unavailable
```

You can use [preconfigured connectors](https://docs-v3-preview.elastic.dev/elastic/kibana/tree/main/reference/connectors-kibana/pre-configured-connectors) to set up a third-party LLM connector.
If you use a preconfigured connector for your LLM connector we recommend you add the `exposeConfig: true` parameter within the `xpack.actions.preconfigured` section of the `kibana.yml` config file. This parameter makes debugging easier by adding configuration information to the debug logs, including which large language model the connector uses.