Release ti ticura 0.1.0 by eduardenes-ticura · Pull Request #19280 · elastic/integrations

eduardenes-ticura · 2026-05-29T07:05:13Z

Initial release of the `ti_ticura` integration (version 0.1.0)

WHAT: Added the ti_ticura integration with all required assets, including pipelines, data streams, rules, searches, dashboards, and fields. This is the first release of this integration.
WHY: To make the ti_ticura integration available to users via the Elastic Package Registry.

Checklist

I have reviewed tips for building integrations and this pull request is aligned with them.
I have verified that all data streams collect metrics or logs.
I have added an entry to my package's changelog.yml file.
I have verified that Kibana version constraints are current according to guidelines.
I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

Verify CI passes and all package assets are valid

How to test this PR locally

Run elastic-package check in the integration directory
Run elastic-package stack up -d and elastic-package install
Verify that data streams, pipelines, and dashboards work as expected after using a ticura ecs feed for integration.

How to verify end-to-end against the live Ticura API:

Create a free trial account at https://app.ticura.io/ , generate a feed with ECS output format and copy the API key.
In Kibana, Management → Integrations → Ticura → Add, configure api_token, leave interval at 15 m.
Verify indicators land in logs-ti_ticura.ecs-* within one poll cycle.
Open [Ticura] Overview dashboard — should show the indicators.
Open Security → Rules → Detection rules, filter by tag Ticura, confirm 5 rules are present and disabled.

Related issues

N/A for initial release

Screenshots

elastic-vault-github-plugin-prod · 2026-05-29T07:05:35Z

Reviewers

Buildkite won't run for external contributors automatically; you need to add a comment:

/test : will kick off a build in Buildkite.

NOTE: https://github.com/elastic/integrations/blob/main/.buildkite/pull-requests.json contains all those details.

eduardenes-ticura · 2026-05-29T07:08:33Z

@efd6 @andrewkroh @jsoriano Hi team, I’d love to get your feedback when you have a chance.
Happy to make any changes if needed to get the release done.

kcreddy · 2026-06-04T12:11:18Z

/test

infra-vault-gh-plugin-prod · 2026-06-04T12:11:30Z

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

github-actions · 2026-06-04T12:12:35Z

Elastic Docs Style Checker (Vale)

Summary: 8 warnings, 3 suggestions found

⚠️ Warnings (8): Fix when the suggestion improves clarity or correctness.

File	Line	Rule	Message
packages/ti_ticura/_dev/build/docs/README.md	5	Elastic.EndPuntuaction	Don't end headings with punctuation.
packages/ti_ticura/_dev/build/docs/README.md	100	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
packages/ti_ticura/_dev/build/docs/README.md	100	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
packages/ti_ticura/_dev/build/docs/README.md	100	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
packages/ti_ticura/_dev/build/docs/README.md	169	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.
packages/ti_ticura/_dev/build/docs/README.md	188	Elastic.Latinisms	Latin terms and abbreviations are a common source of confusion. Use 'for example' instead of 'e.g'.
packages/ti_ticura/_dev/build/docs/README.md	246	Elastic.Latinisms	Latin terms and abbreviations are a common source of confusion. Use 'versus' instead of 'vs'.
packages/ti_ticura/_dev/build/docs/README.md	318	Elastic.QuotesPunctuation	Place punctuation inside closing quotation marks.

💡 Suggestions (3): Optional style improvements. Apply when helpful.

File	Line	Rule	Message
packages/ti_ticura/_dev/build/docs/README.md	154	Elastic.Wordiness	Consider using 'all' instead of 'All of '.
packages/ti_ticura/_dev/build/docs/README.md	377	Elastic.WordChoice	Consider using 'can, might' instead of 'may', unless the term is in the UI.
packages/ti_ticura/changelog.yml	1	Elastic.Versions	Use 'later versions' instead of 'newer versions' when referring to versions.

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

eduardenes-ticura · 2026-06-08T10:06:47Z

@kcreddy Handled findings / comments. Please re-test.

kcreddy · 2026-06-09T08:18:04Z

/test

kcreddy · 2026-06-09T11:39:47Z

/test

eduardenes-ticura · 2026-06-09T12:05:23Z

@kcreddy I had to remove outdated rules that caused failed pipeline. Please re-test

kcreddy · 2026-06-09T12:19:43Z

/test

eduardenes-ticura · 2026-06-25T12:35:33Z

@kcreddy got it. thank you for all the support. just removed the agentless code and doku.

vera-review-bot · 2026-06-25T13:01:39Z

👀 I have started reviewing the PR

kcreddy · 2026-06-26T06:01:11Z

/test

kcreddy

Can you add this section to your README as well?
Once you run elastic-package build this will be rendered inside docs/README with your mapped fields and sample_event.json. Integration docs will look like this: https://www.elastic.co/docs/reference/integrations/ti_threatconnect#logs-reference

eduardenes-ticura · 2026-06-26T08:29:45Z

@kcreddy extended readme as requested and rebuild the sample json. lets see if we're good to go now.

vera-review-bot · 2026-06-26T08:39:08Z

👀 I have started reviewing the PR

kcreddy · 2026-06-26T08:55:08Z

/test

vera-review-bot · 2026-06-26T09:35:59Z

👀 I have started reviewing the PR

vera-review-bot · 2026-06-26T13:04:48Z

👀 I have started reviewing the PR

vera-review-bot · 2026-06-26T13:18:29Z

Vera Review Bot

For the current commit state, I did not find any issues.

🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

eduardenes-ticura · 2026-06-26T15:06:45Z

@kcreddy anything else we could do to proceed here? :-)

kcreddy · 2026-06-26T15:08:55Z

/test

elastic-vault-github-plugin-prod · 2026-06-26T15:13:45Z

✅ All changelog entries have the correct PR link.

vera-review-bot · 2026-06-26T15:27:34Z

👀 I have started reviewing the PR

infra-vault-gh-plugin-prod · 2026-06-26T15:33:27Z

💚 Build Succeeded

Buildkite Build
Commit: f614357

History

💚 Build #45104 succeeded 9066fe9
💚 Build #45093 succeeded 036de20
💚 Build #45070 succeeded 181e158
💚 Build #45065 succeeded ad1a95f
💚 Build #45051 succeeded 2046b1c
💚 Build #45005 succeeded 771baa9

vera-review-bot · 2026-06-26T15:43:14Z

Vera Review Bot

For the current commit state, I did not find any issues.

🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

kcreddy

LGTM. @eduardenes-ticura, thanks for much for the patience and addressing all the review comments.

mergify · 2026-06-26T17:31:43Z

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

Queue this pull request

elastic-vault-github-plugin-prod · 2026-06-26T17:48:49Z

Package ti_ticura - 0.1.0 containing this change is available at https://epr.elastic.co/package/ti_ticura/0.1.0/

eduardenes-ticura added 2 commits May 28, 2026 10:26

[New Integration] ticura integration - initial release 0.3.1

c5a8bd2

minor fixes

68c2cca

eduardenes-ticura requested a review from a team as a code owner May 29, 2026 07:05

Merge branch 'main' into release-ti_ticura-0.3.1

c3f40e4

eduardenes-ticura added 3 commits May 29, 2026 12:48

modified tests to mock

1d341ad

added new tests

ac70328

fixed issue for big downloads

69b9e01

andrewkroh added documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. New Integration Issue or pull request for creating a new integration package. labels May 29, 2026

preserve original fix

b5bffc1

kcreddy added the Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] label Jun 4, 2026

This comment has been minimized.

Sign in to view

vera-review-bot Bot reviewed Jun 4, 2026

View reviewed changes

eduardenes-ticura added 2 commits June 8, 2026 09:51

Update CODEOWNERS

4b615f7

updated kibana version and readme

fe304f1

kcreddy reviewed Jun 9, 2026

View reviewed changes

Comment thread packages/ti_ticura/manifest.yml Resolved

updated min version to 8.19.0

e03fcc4

removed outdated rules

cd660b9

fixed tests to be more robust

39dd9ee

vera-review-bot Bot reviewed Jun 25, 2026

View reviewed changes

Comment thread packages/ti_ticura/data_stream/indicator/sample_event.json Resolved

kcreddy reviewed Jun 26, 2026

View reviewed changes

eduardenes-ticura added 2 commits June 26, 2026 10:28

extend readme with mapped fields

49e4a10

Merge branch 'main' into release-ti_ticura-0.3.1

9066fe9

vera-review-bot Bot reviewed Jun 26, 2026

View reviewed changes

Comment thread packages/ti_ticura/kibana/search/ti_ticura-search-high-risk-today.json Resolved

fixed search

63b428a

vera-review-bot Bot reviewed Jun 26, 2026

View reviewed changes

Comment thread packages/ti_ticura/_dev/deploy/docker/files/ticura-feed.ndjson Resolved

Comment thread packages/ti_ticura/data_stream/indicator/sample_event.json Resolved

fixed readme and use an example IP again

55eadda

Merge branch 'main' into release-ti_ticura-0.3.1

f614357

kcreddy approved these changes Jun 26, 2026

View reviewed changes

kcreddy merged commit df03b65 into elastic:main Jun 26, 2026
12 checks passed

andrewkroh added dashboard Relates to a Kibana dashboard bug, enhancement, or modification. Integration:ti_ticura Ticura (Partner supported) labels Jun 26, 2026

Conversation

eduardenes-ticura commented May 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Initial release of the ti_ticura integration (version 0.1.0)

Checklist

Author's Checklist

How to test this PR locally

How to verify end-to-end against the live Ticura API:

Related issues

Screenshots

Uh oh!

elastic-vault-github-plugin-prod Bot commented May 29, 2026

Reviewers

Uh oh!

eduardenes-ticura commented May 29, 2026

Uh oh!

kcreddy commented Jun 4, 2026

Uh oh!

infra-vault-gh-plugin-prod Bot commented Jun 4, 2026

Uh oh!

github-actions Bot commented Jun 4, 2026

Elastic Docs Style Checker (Vale)

Uh oh!

This comment has been minimized.

This comment has been minimized.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

eduardenes-ticura commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

kcreddy commented Jun 9, 2026

Uh oh!

Uh oh!

kcreddy commented Jun 9, 2026

Uh oh!

eduardenes-ticura commented Jun 9, 2026

Uh oh!

kcreddy commented Jun 9, 2026

Uh oh!

eduardenes-ticura commented Jun 25, 2026

Uh oh!

vera-review-bot Bot commented Jun 25, 2026

Uh oh!

Uh oh!

kcreddy commented Jun 26, 2026

Uh oh!

kcreddy left a comment

Choose a reason for hiding this comment

Uh oh!

eduardenes-ticura commented Jun 26, 2026

Uh oh!

vera-review-bot Bot commented Jun 26, 2026

Uh oh!

kcreddy commented Jun 26, 2026

Uh oh!

Uh oh!

vera-review-bot Bot commented Jun 26, 2026

Uh oh!

Uh oh!

Uh oh!

vera-review-bot Bot commented Jun 26, 2026

Uh oh!

vera-review-bot Bot commented Jun 26, 2026

Vera Review Bot

Uh oh!

eduardenes-ticura commented Jun 26, 2026

Uh oh!

kcreddy commented Jun 26, 2026

Uh oh!

elastic-vault-github-plugin-prod Bot commented Jun 26, 2026

Uh oh!

vera-review-bot Bot commented Jun 26, 2026

Uh oh!

infra-vault-gh-plugin-prod Bot commented Jun 26, 2026

💚 Build Succeeded

History

Uh oh!

eduardenes-ticura commented May 29, 2026 •

edited

Loading

Initial release of the `ti_ticura` integration (version 0.1.0)

eduardenes-ticura commented Jun 8, 2026 •

edited

Loading