Elastic Alert Notification via Microsoft Graph API

This n8n workflow monitors Elastic alerts from your Prism or Elasticsearch instance and instantly notifies teams via email using Microsoft Graph API. It retrieves alert data such as name, timestamp, severity, and message summary, then crafts a professional email with dynamic content for immediate action.

The workflow starts with an HTTP Request node polling the Elastic API endpoint for new alerts. Upon detection, it processes the data and uses another HTTP Request node authenticated via OAuth2 to POST to Graph API's sendMail endpoint. The email subject highlights the alert name (e.g., 'PRISM Elastic Alert: [name]'), and the body includes key details, ensuring recipients get context without logging into dashboards.

Benefits include real-time visibility reducing response times, no-code setup for non-technical users, and scalability for high-volume alerts. In healthcare (e.g., appointment scheduling), it flags issues like system downtime or booking conflicts; ideal for IT ops, compliance monitoring, or any Elastic-dependent operations needing reliable notifications.

Use cases: Healthcare admins tracking scheduling anomalies, DevOps teams for infrastructure alerts, or security for threat notifications—all streamlined to inbox delivery.