The Cost Analysis dashboard helps program managers, security leaders, and migration planners estimate PQC upgrade budgets and effort. It presents executive totals, OS upgrade details, and application-family cost and risk comparisons using the scanner’s emitted cost-analysis fields.
Panels
| Panel | Type | What It Shows |
|---|---|---|
| Total Upgrade Cost / Total Labor Hours / Assets Requiring Upgrade | Single values | Executive totals for estimated upgrade cost and effort, plus the number of deduplicated records with a total-cost value. |
| Labor Cost / Hardware Cost / License / Software Cost | Single values | Estimated cost components for the executive population. |
| Total Cost by OS Category | Table | Shows up to 30 OS categories ranked by cost, including labor hours, license cost, hardware cost, a representative tier, and total OS upgrade cost. |
| Upgrade Cost by Risk Tier | Stacked bar chart | Compares positive-cost OS categories and application families across LEGACY, CLASSICAL, MODERN, and PQC READY. Each item’s entire cost is assigned to its most frequent tier by document count. |
| PQC Cost Composition by App Family (Top 10) | Stacked bar chart | Compares labor, license, and hardware components for the ten highest-cost application families with positive total cost. |
| Priority Matrix (Top App Families) | Table with heatmap shading | Shows application family, tier, affected instances, and estimated cost for the selected leading families, preserving separate family/tier rows. |
Key Data Fields
| Field | Description |
|---|---|
event.dataset | OS estimates use quantum_assessment; application-family estimates use quantum_assessment.app_group. |
_time / id | Search time and event ID used to retain the newest record per id for the executive summary. |
quantum_readiness.cost_analysis.total_cost_usd | Estimated total upgrade cost in US dollars; also used to count records with cost values in the executive summary. |
quantum_readiness.cost_analysis.total_labor_hours | Estimated total labor hours in the executive summary. |
quantum_readiness.cost_analysis.total_labor_cost_usdquantum_readiness.cost_analysis.total_hardware_cost_usdquantum_readiness.cost_analysis.total_license_cost_usd | Executive cost components. All three names use the quantum_readiness.cost_analysis prefix. |
quantum_readiness.cost_analysis.os_categoryquantum_readiness.cost_analysis.os_tier | Operating-system category and its cryptographic readiness tier. |
quantum_readiness.cost_analysis.os_total_cost_usdquantum_readiness.cost_analysis.os_labor_hoursquantum_readiness.cost_analysis.os_hardware_cost_usdquantum_readiness.cost_analysis.os_license_cost_usd | OS-specific cost and effort values, under the same cost_analysis prefix. |
quantum_readiness.cost_analysis.app_familyquantum_readiness.cost_analysis.tierquantum_readiness.cost_analysis.instance_count | Application family, readiness tier, and affected instance count, under the same cost_analysis prefix. |
quantum_readiness.cost_analysis.labor_cost_usdquantum_readiness.cost_analysis.license_cost_usdquantum_readiness.cost_analysis.hardware_cost_usd | Application-family cost components, under the same cost_analysis prefix. |
Reading the Dashboard
Establish the budget and population
Start with the six executive values. Their shared search extracts id, sorts newest first, and keeps one record per id. Assets Requiring Upgrade counts retained records with a total-cost value, including zero-cost records; it does not count unique hosts or only records needing expenditure. Records need a usable id for reliable deduplication.
Compare OS upgrades
The OS table adds OS-specific cost and labor values across matching records and ranks categories by total cost. Its tier is the tier with the most records in that category. The active table does not show a Relative % column, even though the section text refers to relative cost contribution.
Compare cost with cryptographic risk
The risk chart assigns each OS category or application family a representative tier based on document count, then places the item’s full cost in that tier. It is not a cost split across all tiers for the item. Missing tiers default to CLASSICAL in this chart.
Plan application-family work
Compare labor, licensing, and hardware in the top-ten component chart, then use the priority table to inspect family/tier instance counts and costs. Family names may be shortened in the chart. The dashboard layout does not include a separate detailed application-family cost table.
Filtering and Interpretation
The Time Range input defaults to one year (-1y@d to now) and applies to the searches through the tychon_crypto_base macro. The saved dashboard exposes only a Time Range input; it has no Upgrade Category input despite the header’s reference to one. Executive values keep the newest event per id within the selected period, while the OS and application charts sum matching records without that deduplication. Repeated scans can increase chart totals, and chart totals can differ from the executive values.
Costs come from the scanner’s precomputed cost_analysis fields and represent planning estimates. Missing values can produce empty panels or incomplete totals; a zero or blank result does not establish that no upgrade is needed. Check that the tychon_crypto_base macro resolves to your assessment data and that the two event.dataset values and dotted cost fields are available. The component chart shows ten families, and the OS table shows up to 30 categories.