Analyze logs and correlate incidents with OpenAI and Slack
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 17 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects Embeddings OpenAI, OpenAI Chat Model and Slack.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- Workflow Configuration (Edit Fields (Set)): sets 6 fields: logsApiUrl, metricsApiUrl, deploymentsApiUrl…
- Fetch Logs (HTTP Request): calls an HTTP API
- Fetch Metrics (HTTP Request): calls an HTTP API
- Fetch Recent Deployments (HTTP Request): calls an HTTP API
- Fetch Feature Flags (HTTP Request): calls an HTTP API
- Normalize and Denoise Logs (Code): runs custom JavaScript code
- Merge Context Data (Aggregate): combines items into one
- Cluster Log Messages (Simple Vector Store): stores documents in the Simple vector store, with embeddings: OpenAI Embeddings; document loader: Document Loader
- Identify Failure Patterns (Code): runs custom JavaScript code
- Time-Align Events (Code): runs custom JavaScript code
…plus 2 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (12)
- Webhook
n8n-nodes-base.webhook - Edit Fields (Set)
n8n-nodes-base.set - HTTP Request
n8n-nodes-base.httpRequest - Code
n8n-nodes-base.code - Aggregate
n8n-nodes-base.aggregate - Embeddings OpenAI
@n8n/n8n-nodes-langchain.embeddingsOpenAi - Simple Vector Store
@n8n/n8n-nodes-langchain.vectorStoreInMemory - OpenAI Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenAi - Structured Output Parser
@n8n/n8n-nodes-langchain.outputParserStructured - AI Agent
@n8n/n8n-nodes-langchain.agent - Slack
n8n-nodes-base.slack - Default Data Loader
@n8n/n8n-nodes-langchain.documentDefaultDataLoader
From the author
Overview This workflow implements an AI-powered incident investigation and root cause analysis system that automatically analyzes operational signals when a system incident occurs. When an incident is triggered via webhook, the workflow gathers operational…