Automated Wazuh Rule Deployment via GitHub with Validation & Alerts

Automates Wazuh rule deployment from GitHub commits containing #deploy-wazuh, including XML validation, secure upload, manager restart, and Telegram notifications for teams.

This n8n workflow revolutionizes Wazuh rule management by triggering on GitHub commits with the #deploy-wazuh hashtag. It first verifies the commit author is authorized, sends contextual SOC notifications, downloads the rule XML, and validates it using xmllint to prevent deployment of invalid rules that could crash the SIEM. If validation passes, the workflow securely uploads the rule to the Wazuh Manager node, restarts the service, and verifies successful loading. Finally, it dispatches detail
Platform
n8n
Category
Development & IT
Price
$24.99
Creator
BestWorkflows

How to import this workflow into n8n

  1. 1Purchase or download the workflow to get the n8n workflow JSON file.
  2. 2In your n8n instance, open Workflows and choose "Import from File" (or paste the JSON with Ctrl+V on the canvas).
  3. 3Open each node marked with a credential warning and connect your own accounts and API keys.
  4. 4Run the workflow once manually to verify the data flow, then toggle it to Active.

Related Development & IT workflows

More from BestWorkflows

All Development & IT workflows →All n8n workflows →

Need this deployed? We'll set it up for you.

Our automation experts deploy this workflow in your stack, connect your accounts, and verify it works — or build a custom solution from scratch.

Get It DeployedCustom Build