Wazuh Alert Triage & AI Reporting with GPT-4o-mini & Telegram

Automates Wazuh security alert triage using GPT-4o-mini for contextual analysis, MITRE mapping, and Telegram notifications to reduce SOC fatigue.

This n8n workflow transforms Wazuh alert management by automating triage, AI-powered analysis, and multi-channel reporting. It starts with a webhook capturing real-time Wazuh alerts, filters them by severity to prioritize high-impact events, and leverages OpenAI's GPT-4o-mini via LangChain for in-depth investigation. The AI generates comprehensive reports including incident overviews, MITRE ATT&CK mappings, impacted assets, threat classifications, risk assessments, and actionable recommendations
Platform
n8n
Category
Sales
Price
$24.99
Creator
Saskia Kowalczyk

How to import this workflow into n8n

  1. 1Purchase or download the workflow to get the n8n workflow JSON file.
  2. 2In your n8n instance, open Workflows and choose "Import from File" (or paste the JSON with Ctrl+V on the canvas).
  3. 3Open each node marked with a credential warning and connect your own accounts and API keys.
  4. 4Run the workflow once manually to verify the data flow, then toggle it to Active.

Related Sales workflows

More from Saskia Kowalczyk

All Sales workflows →All n8n workflows →

Need this deployed? We'll set it up for you.

Our automation experts deploy this workflow in your stack, connect your accounts, and verify it works — or build a custom solution from scratch.

Get It DeployedCustom Build