Automated failed login detection with Jira tasks, Slack alerts & Notion logging
Needs changesNeeds changes. This template uses 1 thing(s) that n8n 3.0 removes: Function (legacy). 1 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 15 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects Jira Software, Slack and Notion.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- Normalize Login Event (Function): runs custom JavaScript (legacy Function node)
- Check Username & IP present (If): checks a condition and branches into true / false
- Detect Multiple Attempts (Function): runs custom JavaScript (legacy Function node)
- Slack: uses Slack
- If: checks a condition and branches into true / false
- Build Multi-Attempt Summary (Function): runs custom JavaScript (legacy Function node)
- Create Ticket - Single Attempt (Jira Software): uses Jira Software
- Create Ticket- Multiple Attempts (Jira Software): uses Jira Software
- Format Fields For Single Attempt (Edit Fields (Set)): sets 5 fields: ip, username, totalAttempts…
- Format Fields for Multiple-attempt (Edit Fields (Set)): sets 5 fields: ip, username, totalAttempts…
…plus 4 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:
- Function (legacy) in Normalize Login Event, Build Multi-Attempt Summary, Detect Multiple Attempts: replace with Code node, mode 'Run Once for All Items'.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| Function (legacy) Normalize Login Event, Build Multi-Attempt Summary, Detect Multiple Attempts | Code node, mode 'Run Once for All Items' |
Nodes used (8)
- Webhook
n8n-nodes-base.webhook - Function
n8n-nodes-base.function - If
n8n-nodes-base.if - Jira Software
n8n-nodes-base.jira - Slack
n8n-nodes-base.slack - Code
n8n-nodes-base.code - Notion
n8n-nodes-base.notion - Edit Fields (Set)
n8n-nodes-base.set
From the author
Automated Failed Login Detection with Jira Security Tasks, Slack Notifications Webhook: Failed Login Attempts → Jira Security Case → Slack Warnings --- This n8n workflow monitors failed login attempts from any application, normalizes incoming data, detects…