Summarize daily security logs with OpenAI and send briefings via WhatsApp and email
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 20 nodes and runs on a schedule (cron 0 7 * * *) (plus 2 other triggers). Along the way it connects OpenAI Chat Model and WhatsApp Business Cloud.
How it runs
Trigger: On a schedule (cron 0 7 * * *) (plus 2 other triggers).
- Set - Config (Edit Fields (Set)): sets 14 fields: logAggregatorApiUrl, timeRangeHours, notableEventLimit…
- Set - Weekly Digest Config (Edit Fields (Set)): sets 2 fields: weeklyDigestEmailTo, emailFrom
- HTTP Request: calls an HTTP API
- JS - Build Weekly Trend Report (Code): runs custom JavaScript code
- JS - Normalize, Categorize & Score Log Events (Code): runs custom JavaScript code
- Email - Send Weekly Trend Digest (Send Email): sends an email over SMTP
- JS - Detect Coverage Gaps & Spike Score (Code): runs custom JavaScript code
- AI - Summarize Security Events (Basic LLM Chain): sends a prompt to an LLM, with model: OpenAI Chat Model
- JS - Parse AI Summary & Build Briefing Payloads (Code): runs custom JavaScript code
- If: checks a condition and branches into true / false
…plus 6 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (11)
- Schedule Trigger
n8n-nodes-base.scheduleTrigger - Manual Trigger
n8n-nodes-base.manualTrigger - Edit Fields (Set)
n8n-nodes-base.set - HTTP Request
n8n-nodes-base.httpRequest - Code
n8n-nodes-base.code - OpenAI Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenAi - Basic LLM Chain
@n8n/n8n-nodes-langchain.chainLlm - If
n8n-nodes-base.if - Wait
n8n-nodes-base.wait - WhatsApp Business Cloud
n8n-nodes-base.whatsApp - Send Email
n8n-nodes-base.emailSend
From the author
Quick Overview This workflow pulls the last 24 hours of aggregated security logs from a SIEM API, normalizes and deduplicates events, uses OpenAI to generate a daily risk briefing with optional escalation gating, and sends a short summary via WhatsApp and a…