Skip to content

Add TYCHON Quantum Command integration package#20142

Open
Audience2801 wants to merge 9 commits into
elastic:mainfrom
Audience2801:main
Open

Add TYCHON Quantum Command integration package#20142
Audience2801 wants to merge 9 commits into
elastic:mainfrom
Audience2801:main

Conversation

@Audience2801

@Audience2801 Audience2801 commented Jul 15, 2026

Copy link
Copy Markdown

Proposed commit message

Add the TYCHON Quantum Command integration package for Elastic Agent and Fleet

This change introduces the initial 2.0.4 release of the tychon_quantum_command integration package aligned to the current TYCHON Quantum Command release.

WHAT:

  • Adds the tychon_pqc logs data stream for TYCHON Quantum Command NDJSON/JSON output collected through the filestream input.
  • Adds the ingest pipeline and field mappings required to normalize TYCHON source events into ECS-aligned and product-specific fields.
  • Adds transform definitions that read from the namespace-safe source data stream pattern logs-tychon_quantum_command.tychon_pqc-* and publish analytical destination indices for TYCHON datasets including inventory, applications, certificates, ciphers, crypto libraries, keystores, VPN clients, IPsec tunnels, MACsec, installed apps, browser extensions, assets, archives, and system readiness.
  • Adds packaged Kibana assets including dashboards, visualizations, searches, tags, and index patterns for the supported TYCHON reporting views.
  • Adds package documentation, screenshots, validation configuration, sample events, and local tests to verify manifest assets, README generation, package readiness, stream configuration, changelog links, and Kibana saved object integrity.

WHY:

  • TYCHON Quantum Command produces security-relevant cryptographic inventory and post-quantum readiness data that benefits from centralized ingestion, normalization, analytics, and visualization in Elastic.
  • This package provides a supported ingestion path for TQC file output while preserving namespace-safe source indexing and producing dataset-focused transform destinations for dashboards and reporting.
  • The package version is intentionally kept at 2.0.4 so the initial integration release matches the currently released TQC version.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • Verified elastic-package check completes successfully.
  • Verified elastic-package build produces tychon_quantum_command-2.0.4.zip.
  • Verified package docs use the generated README template flow.
  • Verified the root sample_event.json is a real event and not the default placeholder.
  • Verified transforms use the namespace-safe source pattern logs-tychon_quantum_command.tychon_pqc-*.
  • Verified local Python test suite passes.

How to test this PR locally

  1. Clone or update a local checkout of elastic/integrations.
  2. Copy this package into packages/tychon_quantum_command.
  3. From the repository root or package directory, run: 
    elastic-package check
elastic-package build

@cla-checker-service

cla-checker-service Bot commented Jul 15, 2026 •
edited
Loading

Copy link
Copy Markdown

💚 CLA has been signed

@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Reviewers

Buildkite won't run for external contributors automatically; you need to add a comment:

  • /test : will kick off a build in Buildkite.

NOTE: https://github.com/elastic/integrations/blob/main/.buildkite/pull-requests.json contains all those details.

@andrewkroh andrewkroh added needs CLA User must sign the Elastic Contributor License before review. New Integration Issue or pull request for creating a new integration package. documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. labels Jul 15, 2026
@andrewkroh andrewkroh removed the needs CLA User must sign the Elastic Contributor License before review. label Jul 16, 2026
@Audience2801
Audience2801 marked this pull request as ready for review July 16, 2026 14:58
@Audience2801
Audience2801 requested a review from a team as a code owner July 16, 2026 14:58
efd6
efd6 reviewed Jul 16, 2026
View reviewed changes
Comment thread ...ommand/kibana/visualization/tychon_quantum_command-01375d36-099a-405d-a513-b1a782190a1d.json Outdated
Comment thread packages/tychon_quantum_command/tests/__pycache__/test_changelog.cpython-314.pyc Outdated
Comment thread packages/tychon_quantum_command/_dev/build/docs/README.md Outdated
@Audience2801
Audience2801 requested a review from a team as a code owner July 17, 2026 20:32
@Audience2801
- replaced hard-coded Data_streams/Transforms/Exported fields blocks…
12b6fe7 
… in README Template with {{ fields tychon_pqc }} and {{ event tychon_pqc }} - replaced dashboard and supporting objects with those output from 'elastic-package export dashboards' command.
efd6
efd6 reviewed Jul 20, 2026
View reviewed changes
Comment thread ...ana/dashboard/tychon_quantum_command-02366033-dee4-4ea4-8458-7c8a8b58987e-cost-analysis.json
Comment thread ...n_quantum_command-d0159137-9139-4a93-85bb-2ac9ddab3982-certificate-operations-dashboard.json Outdated
@Audience2801
Remove unused Kibana visualization saved objects
c504bb3 
Deleted 14 standalone visualization saved objects that are no longer referenced
by the package dashboards after converting visualization panels to by-value
embeds.

Confirmed all remaining data views are still referenced:
- 05179988-8b3d-4f26-9832-d83a1e769b2d: used by application-report,
  application-detail, and DoD OMB report search
- 1dc9d581-4b38-4108-84e1-59a9fbcfbca5: used by Certificate Inventory Detail
  search for runtime fields and duration formatting
- 852a2806-9a09-4c17-bcea-b54e7b69f3bc: used by application-detail dashboard
efd6
efd6 reviewed Jul 22, 2026
View reviewed changes
Comment thread packages/tychon_quantum_command/sample_event.json Outdated
Comment thread packages/tychon_quantum_command/LICENSE.txt Outdated
Comment thread packages/tychon_quantum_command/manifest.yml Outdated
Comment thread ...ana/dashboard/tychon_quantum_command-02366033-dee4-4ea4-8458-7c8a8b58987e-cost-analysis.json
@Audience2801
Fix Vega dashboard filter logic, empty states, and certificate source…
0af5250 
… query handling

Expanded summary:
- Correct inverted Vega filter-toggle ternaries so selected rows remove filters and unselected rows add them.
- Add consistent empty-state indicators to Vega query panels.
- Add missing time bindings to certificate dashboard Vega queries, using Kibana-compatible dashboard context where explicit queries are required.
- Fix Certificate Source Type panel by replacing invalid %context% + body.query usage with dashboard context placeholders and %timefilter%.
- Add a topology truncation warning for the 500-relationship composite bucket limit.
- Add regression tests covering Vega toggle behavior, time binding presence, empty-state indicators, and topology truncation disclosure.
- Updated .github/CODEOWNERS and manifest.yml with correct owners.
- Removed LICENSE.txt and sample_event.json.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@efd6 efd6 efd6 left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. New Integration Issue or pull request for creating a new integration package.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@Audience2801 @efd6 @andrewkroh