Send TheHive alerts using SIGNL4

Ready for 3.0

by Ron ✓ · 1,043 views · created 2022-05-11 · SecOps

Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.

What this workflow does

This workflow has 7 nodes and runs manually, when you click “Execute workflow” (plus 1 other trigger). Along the way it connects TheHive and SIGNL4.

How it runs

Trigger: Manually, when you click “Execute workflow” (plus 1 other trigger).

TheHive: uses TheHive
If: checks a condition and branches into true / false
SIGNL4: uses SIGNL4
SIGNL4: resolve
TheHive: get many

Services it uses

TheHive SIGNL4

Before you upgrade to n8n 3.0

Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.

Nodes used (5)

TheHiven8n-nodes-base.theHive
Ifn8n-nodes-base.if
SIGNL4n8n-nodes-base.signl4
Webhookn8n-nodes-base.webhook
Manual Triggern8n-nodes-base.manualTrigger

From the author

This sample workflow allows you to forward alerts from TheHive 5 to SIGNL4 in order to send reliable alerts to your team. There are two nodes for testing the TheHive connection ("TheHive Read Alerts" and "TheHive Create Alert"). The node "TheHive Webhook…
Excerpt from Ron's description on n8n.io.

View the original on n8n.io → Check your own copy

Send TheHive alerts using SIGNL4

What this workflow does

How it runs

Services it uses

Before you upgrade to n8n 3.0

Nodes used (5)

From the author

Get the weekly “what broke” email