Skip to content

TheHive 5 Trigger node#

Use the TheHive 5 Trigger node to respond to events in TheHive and integrate TheHive with other applications. n8n has built-in support for a wide range of TheHive events, including alerts, cases, comments, pages, and tasks.

On this page, you'll find a list of events the TheHive5 Trigger node can respond to and links to more resources.

TheHive and TheHive 5

n8n provides two nodes for TheHive. Use this node (TheHive 5 Trigger) if you want to use TheHive's version 5 API. If you want to use version 3 or 4, use TheHive Trigger.

Examples and templates

For usage examples and templates to help you get started, refer to n8n's TheHive 5 Trigger integrations page.

Events#

  • Alert
    • Created
    • Deleted
    • Updated
  • Case
    • Created
    • Deleted
    • Updated
  • Comment
    • Created
    • Deleted
    • Updated
  • Observable
    • Created
    • Deleted
    • Updated
  • Page
    • Created
    • Deleted
    • Updated
  • Task
    • Created
    • Deleted
    • Updated
  • Task log
    • Created
    • Deleted
    • Updated

n8n provides an app node for TheHive 5. You can find the node docs here.

Refer to TheHive's documentation for more information about the service.

Configure a webhook in TheHive#

To configure the webhook for your TheHive instance:

  1. Copy the webhook URL from TheHive Trigger node.
  2. Add the following lines to the application.conf file. This is TheHive configuration file.
     1
     2
     3
     4
     5
     6
     7
     8
     9
    10
    notification.webhook.endpoints = [
    	{
    		name: WEBHOOK_NAME
    		url: WEBHOOK_URL
    		version: 0
    		wsConfig: {}
    		includedTheHiveOrganisations: ["ORGANIZATION_NAME"]
    		excludedTheHiveOrganisations: []
    	}
    ]
    
  3. Replace WEBHOOK_URL with the URL you copied in the previous step.
  4. Replace ORGANIZATION_NAME with your organization name.
  5. Execute the following cURL command to enable notifications:
     1
     2
     3
     4
     5
     6
     7
     8
     9
    10
    curl -XPUT -uTHEHIVE_USERNAME:THEHIVE_PASSWORD -H 'Content-type: application/json' THEHIVE_URL/api/config/organisation/notification -d '
    {
    	"value": [
    		{
    		"delegate": false,
    		"trigger": { "name": "AnyEvent"},
    		"notifier": { "name": "webhook", "endpoint": "WEBHOOK_NAME" }
    		}
    	]
    }'