Enrich OpenObserve alerts with log context and notify responders via Novu
UnknownUnknown. This template uses community nodes we can't verify statically. Uses community nodes that can't be verified statically (unverified community packages are off by default in 3.0). Static check, last run 2026-10-19.
What this workflow does
This workflow has 18 nodes and runs on Open Observe events. Along the way it connects Openobserve (community) and Novu (community).
How it runs
Trigger: On Open Observe events.
- Set Incident Enrichment Fields (Edit Fields (Set)): sets 13 fields: log_stream, service_field, default_service…
- Normalize Alert Data (Code): runs custom JavaScript code
- Prepare Log Search Query (Code): runs custom JavaScript code
- Execute Alert Window Query (Open Observe): work with search
- Find Closest Log Anchor (Code): runs custom JavaScript code
- Check for Log Anchor (If): checks a condition and branches into true / false
- Search Logs Near Anchor (Open Observe): search around
- Compile Incident Brief (Code): runs custom JavaScript code
- Retrieve Notification Cooldown (Data table): get
- Assess Notification Needs (Code): runs custom JavaScript code
…plus 7 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
We can't fully verify this one: it relies on 3 community packages, and n8n 3.0 turns unverified community packages off by default (N8N_UNVERIFIED_PACKAGES_ENABLED=false).
- Check that @blackswampai/n8n-nodes-openobserve is verified or supports 3.0 (used in OpenObserve Alert Trigger).
- Check that @blackswampai/n8n-nodes-openobserve is verified or supports 3.0 (used in Execute Alert Window Query, Search Logs Near Anchor).
- Check that @blackswampai/n8n-nodes-novu is verified or supports 3.0 (used in Deliver Incident via Novu).
Nodes used (7)
- Open Observe Trigger
@blackswampai/n8n-nodes-openobserve.openObserveTrigger - Edit Fields (Set)
n8n-nodes-base.set - Code
n8n-nodes-base.code - Open Observe
@blackswampai/n8n-nodes-openobserve.openObserve - If
n8n-nodes-base.if - Data table
n8n-nodes-base.dataTable - Novu
@blackswampai/n8n-nodes-novu.novu
From the author
Quick overview This workflow triggers on selected OpenObserve alerts, queries nearby logs for context, redacts sensitive fields, suppresses duplicate notifications with a cooldown, and sends an enriched incident payload to Novu responders (or outputs a…