TheHive Case to Slack Integration

Name: TheHive Case to Slack Integration
Rating: 5.0 (1 reviews)
Author: Free N8N

Beginner

0 nodes connected

detail.loadingPreview

Free N8N Temples

25 views

0 downloads

IntegrationsAutomationIncident ResponseSecuritySlackTheHive

Automates the process of sending TheHive case updates to Slack and allows for task creation from Slack.

🚀Ready to Deploy This Workflow?

⚡Deploy on Zeabur 🎁Get $200 Credit on DigitalOcean

About This Workflow

TheHive Case to Slack Integration

This workflow leverages n8n to connect TheHive and Slack, enabling automated notifications and interactive task management. When a case is created in TheHive, it triggers an event that can be processed and potentially forwarded to Slack. Additionally, it provides a mechanism to create tasks within TheHive directly from a Slack interface, enhancing collaboration and incident response.

Key Features

Triggers automated workflows on TheHive case creation.
Sends case updates and relevant information to Slack.
Enables users to create tasks in TheHive from a Slack modal.
Utilizes environment variables for flexible configuration of webhook URLs and API base URLs.
Maps TheHive status and severity to visual emojis in Slack for quick understanding.

How To Use

TheHive Setup: Configure a webhook in TheHive's settings pointing to your n8n instance's TheHive trigger endpoint.
Environment Variables: Set the WEBHOOK_URL and API_BASE_URL environment variables in your n8n setup to match your Slack API and n8n instance's accessible URL respectively.
Workflow Deployment: Import this workflow into your n8n instance.
Configuration: Ensure the TheHive trigger node is correctly configured with the desired events (e.g., case_create).
Slack App Configuration: If the Slack modal for task creation is intended to be user-facing, ensure you have a corresponding Slack application set up to handle the interactions, and the API_BASE_URL points to the correct endpoint that will receive these interactions.

Apps Used

Automation

Incident Response

Security

Slack

TheHive

Workflow JSON

{
  "id": "5d3ae607-8e2c-4994-a146-5a76f7510acd",
  "name": "TheHive Case to Slack Integration",
  "nodes": 0,
  "category": "Integrations",
  "status": "active",
  "version": "1.0.0"
}

Note: This is a sample preview. The full workflow JSON contains node configurations, credentials placeholders, and execution logic.