Skip to content
FlowHubFluxonLab
HTTP Request
Slackfree

New TheHive Case Slack Notification Bot

by Angel Menendezadapted from n8n official workflow galleryUpdated Aug 2026
RequiresHTTP RequestHTTP RequestSlackTheHive 5TheHive 5
Share Post Share
THTheHive TriggerSeEdit FieldsHRTask ModalHRHTTP RequestSeFormatting DictionariesFormatting Dict…SePrep Fields For SlackPrep Fields For…HRUpdate Message with new AssigneeUpdate Message …IfCheck if Case OptionsCheck if Case O…SeCase Slack Block RebuildCase Slack Bloc…SeClose Case Block RebuildClose Case Bloc…SeSeverity Case Block Rebuild1Severity Case B…SePAP Case Block RebuildPAP Case Block …SePrep Fields For PAP SlackPrep Fields For…SeMap ActionsSeBuild Final BlockBuild Final Blo…SePrep Fields For TLP SlackPrep Fields For…SePrep Fields For Status SlackPrep Fields For…THUpdate Status in TheHiveUpdate Status i…THClose Case as False PositiveClose Case as F…SeStatus Case Block RebuildStatus Case Blo…SeTLP Case Block RebuildTLP Case Block …NONo Action NeededPost New Case To SlackPost New Case T…SePrep Fields For Slack - ClosePrep Fields For…SePrep Fields For Slack - AssignPrep Fields For…SePrep Fields For Slack - SeverityPrep Fields For…THUpdate Case SeverityUpdate Case Sev…THUpdate Case PAPTHUpdate Case TLPRTAcknowledge Close Case to SlackAcknowledge Clo…RTAcknowledge Severity Update to SlackAcknowledge Sev…RTAcknowledge PAP Update to SlackAcknowledge PAP…RTAcknowledge TLP Update to SlackAcknowledge TLP…RTAcknowledge Status Update to SlackAcknowledge Sta…RTAcknowledge Modal Request to SlackAcknowledge Mod…SwParse Message TypeParse Message T…RTRespond positive to Slack when someone clicks a linkRespond positiv…RTRespond 204 to SlackRespond 204 to …RTClose Modal with 204 responseClose Modal wit…Get Slack User's Email From SlackGet Slack User'…THUpdate TheHive Case with new AssigneeUpdate TheHive …RTRespond to Slack with 200 responseRespond to Slac…Get Email From Slack to assign the task to in TheHiveGet Email From …THAdd a task to TheHiveAdd a task to T…WeReceive Button PressReceive Button …1234
1/5
FLOWS
STEPS · 4
Starts on a The Hive Project event

Streamline Case Management in TheHive via Slack! Our TheHive Slack Integration empowers SOC analysts by allowing them to efficiently manage and update case attributes directly within Slack, reducing the need to switch contexts and enhancing response time. Key Features: Direct Case Management**: Modify case details such as assignee, severity, status, and more through intuitive form inputs embedded within Slack messages. Seamless Integration**: Assumes matching email addresses between TheHive and Slack users for straightforward assignee updates. Note: Ensure email consistency to avoid assignment errors. Instant Case Actions**: Quickly close cases as false positives or adjust threat levels with minimal clicks, directly impacting case status in TheHive and reflecting updates immediately in Slack. Task Management**: Add tasks to cases through a user-friendly modal popup, fostering better task tracking and delegation within your team. Operational Benefits: Efficiency**: Enables analysts to perform multiple case actions without leaving Slack, streamlining workflows and saving valuable time.

Tags

n8nreference-onlyslackthe-hive-project
Connects
WHTTP RequestSlackthehive5TheHive 5
CategorySlack
Triggermanual
Complexityadvanced
Nodes45
AddedNov 26, 2024

Related workflows

See all Slack
CWsupabase
free

Send monthly real estate market summaries to Slack with Supabase and Rentcast

Quick overview Youtube Video: https://youtu.be/zJlncb1T074?si=fnKE7SPh7I-JGdmx This workflow runs monthly for a configured ZIP code, checks Supabase for recent market rental and sales records, and either reports the existing stats or pulls fresh data from the Rentcast API, upserts it into Supabase, and posts a formatted market update to Slack. How it works Runs on a monthly schedule and sets the target ZIP code to analyze. Queries Supabase tables for rental and sales market records for that ZIP code that are older than the start of the current month. If existing data is found, calculates month-over-month changes from the stored history and posts a Slack update (or an admin error message if the history is insufficient). If no current data exists, fetches the latest rental and sales market statistics from the Rentcast Markets API. Upserts the fetched rental and sales statistics (including history and summary fields) into Supabase using the REST endpoint. Calculates month-over-month changes from the newly fetched history and posts a Slack market summary, or posts an error message if the data is incomplete. Setup Create a Supabase project with market_rentals and market_sales tables and

by iamvaar
CWsupabase
free

Send monthly rent and sales market updates to Slack with Rentcast and Supabase

Quick overview Youtube Video: https://youtu.be/zJlncb1T074 This workflow runs monthly, checks Supabase for up-to-date real estate market records for a configured ZIP code, and either reports existing month-over-month rent and sale trends or fetches fresh market stats from the Rentcast API, upserts them into Supabase, and posts to Slack. How it works Runs on a monthly schedule and sets the target ZIP code to analyze. Queries Supabase for rental and sales market records for that ZIP code that are older than the start of the current month. If prior data exists, calculates the last 3 months of average rent and average sale price changes from Supabase history fields and posts a status summary to Slack (or alerts if comparisons are not possible). If no up-to-date data exists, requests the latest market statistics from the Rentcast markets API for the same ZIP code. Upserts the returned rental and sales metrics (including history) into Supabase tables for market_rentals and market_sales. Computes month-over-month changes from the newly fetched history and posts the formatted market update to Slack (or sends an error alert if insufficient data is returned). Setup Create/connect Supabase cr

by iamvaar
CW
free

Draft personalized LinkedIn outreach from buying signals with Twain and Slack

Quick overview This workflow captures buying-signal leads via a webhook (or optionally polls a HubSpot list), generates a personalized LinkedIn intro and follow-up sequence with Twain, and posts the ready-to-send draft to Slack, with an optional step to stage the lead in a HeyReach campaign. How it works Receives a lead signal via a POST webhook (or, if enabled, runs every 15 minutes to pull contacts from a HubSpot list). Sets the Twain LinkedIn campaign and optional HeyReach campaign IDs, then normalizes the incoming lead fields (name, email, company, LinkedIn URL, and signal context). Deduplicates leads using a stable unique identifier so previously processed contacts are skipped on future runs. If the lead has no LinkedIn profile URL but has an email, optionally looks up the LinkedIn URL using Findymail (or an alternative provider you enable) and merges it back into the lead. If a LinkedIn URL is available, calls the Twain Generate Sequence API to research the lead and generate an intro message plus follow-ups, or posts an error to Slack if generation fails. Formats the generated messages into a review-friendly summary and posts the draft to a Slack channel for manual sending, w

by Mohamed Yahya Chahin