How to connect AlienVault and TheHive 5

Step 1: Create a new workflow
Step 2: Add and configure nodes
Step 3: Connect
Step 4: Customize and extend your integration
Step 5: Test and activate your workflow

Step 1: Create a new workflow and add the first step

In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.

AlienVault and TheHive 5 integration: Create a new workflow and add the first step

Step 2: Add and configure TheHive 5 and AlienVault (using the HTTP Request node)

You can find TheHive 5 and AlienVault nodes in the nodes panel and drag them onto your workflow canvas. TheHive 5 node comes with pre-built credentials and supported actions. AlienVault can be set up with the HTTP Request node using a pre-configured credential type. The HTTP Request node makes custom API calls to AlienVault. Configure TheHive 5 and AlienVault nodes one by one: input data on the left, parameters in the middle, and output data on the right.

TheHive 5 and AlienVault integration: Add and configure TheHive 5 and AlienVault nodes

Step 3: Connect TheHive 5 and AlienVault

A connection establishes a link between TheHive 5 and AlienVault (or vice versa) to route data through the workflow. Data flows from the output of one node to the input of another. You can have single or multiple connections for each node.

TheHive 5 and AlienVault integration: Connect TheHive 5 and AlienVault

Step 4: Customize and extend your TheHive 5 and AlienVault integration

Use n8n's core nodes such as If, Split Out, Merge, and others to transform and manipulate data. Write custom JavaScript or Python in the Code node and run it as a step in your workflow. Connect TheHive 5 and AlienVault with any of n8n’s 1000+ integrations, and incorporate advanced AI logic into your workflows.

TheHive 5 and AlienVault integration: Customize and extend your TheHive 5 and AlienVault integration

Step 5: Test and activate your TheHive 5 and AlienVault workflow

Save and run the workflow to see if everything works as expected. Based on your configuration, data should flow from TheHive 5 to AlienVault or vice versa. Easily debug your workflow: you can check past executions to isolate and fix the mistake. Once you've tested everything, make sure to save your workflow and activate it.

TheHive 5 and AlienVault integration: Test and activate your TheHive 5 and AlienVault workflow

Build your own AlienVault and TheHive 5 integration

Create custom AlienVault and TheHive 5 workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.

Supported API Endpoints for AlienVault

Pulses
Indicators
Users
Subscriptions

GetPulseDetails

Retrieve details of a specific pulse.

GET

/api/v1/pulses/{pulse_id}

CreatePulse

Create a new pulse.

POST

/api/v1/pulses/create

UpdatePulse

Update an existing pulse.

PUT

/api/v1/pulses/{pulse_id}

DeletePulse

Delete an existing pulse.

DELETE

/api/v1/pulses/{pulse_id}

GetUserPulses

Retrieve pulses created by a specific user.

GET

/api/v1/pulses/user/{username}

To set up AlienVault integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to AlienVault to query the data you need using the URLs you provide.

See the example here

Take a look at the AlienVault official documentation to get a full list of all API endpoints

GetIndicatorDetails

Retrieve details of a specific indicator.

GET

/api/v1/indicators/{indicator_type}/{indicator}

GetIndicatorGeneral

Retrieve general information about an indicator.

GET

/api/v1/indicators/{indicator_type}/{indicator}/general

GetIndicatorGeo

Retrieve geolocation information about an indicator.

GET

/api/v1/indicators/{indicator_type}/{indicator}/geo

GetIndicatorMalware

Retrieve malware information about an indicator.

GET

/api/v1/indicators/{indicator_type}/{indicator}/malware

GetIndicatorURLList

Retrieve URL list for an indicator.

GET

/api/v1/indicators/{indicator_type}/{indicator}/url_list

See the example here

Take a look at the AlienVault official documentation to get a full list of all API endpoints

GetUserDetails

Retrieve details of a specific user.

GET

/api/v1/user/{username}

GetUserFollowers

Retrieve followers of a specific user.

GET

/api/v1/user/{username}/followers

GetUserFollowing

Retrieve users followed by a specific user.

GET

/api/v1/user/{username}/following

FollowUser

Follow a specific user.

POST

/api/v1/user/{username}/follow

UnfollowUser

Unfollow a specific user.

POST

/api/v1/user/{username}/unfollow

See the example here

Take a look at the AlienVault official documentation to get a full list of all API endpoints

GetSubscriptionDetails

Retrieve details of a specific subscription.

GET

/api/v1/subscriptions/{subscription_id}

GetUserSubscriptions

Retrieve subscriptions of a specific user.

GET

/api/v1/subscriptions/user/{username}

SubscribeToPulse

Subscribe to a specific pulse.

POST

/api/v1/subscriptions/{pulse_id}/subscribe

UnsubscribeFromPulse

Unsubscribe from a specific pulse.

POST

/api/v1/subscriptions/{pulse_id}/unsubscribe

GetPulseSubscribers

Retrieve subscribers of a specific pulse.

GET

/api/v1/subscriptions/{pulse_id}/subscribers

See the example here

Take a look at the AlienVault official documentation to get a full list of all API endpoints

TheHive 5 supported actions

Create

Delete

Execute Responder

Get

Merge Into Case

Promote to Case

Update

Update Status

Add Attachment

Create

Delete Attachment

Delete Case

Execute Responder

Get

Get Attachment

Get Timeline

Update

Create

Delete

Update

Create

Delete

Execute Analyzer

Execute Responder

Get

Update

Create

Delete

Update

Execute Query

Create

Delete

Execute Responder

Get

Update

Add Attachment

Create

Delete

Delete Attachment

Execute Responder

Get

Guide
SecOps

A guide to incident response playbooks

Learn the importance of incident response playbooks, how they enhance incident management, and automate your playbook with n8n workflow templates in this comprehensive article.

FAQs

Can AlienVault connect with TheHive 5?
Can I use AlienVault’s API with n8n?
Can I use TheHive 5’s API with n8n?
Is n8n secure for integrating AlienVault and TheHive 5?
How to get started with AlienVault and TheHive 5 integration in n8n.io?

AlienVault and TheHive 5 integration

How to connect AlienVault and TheHive 5

Step 1: Create a new workflow and add the first step

Step 2: Add and configure TheHive 5 and AlienVault (using the HTTP Request node)

Step 3: Connect TheHive 5 and AlienVault

Step 4: Customize and extend your TheHive 5 and AlienVault integration

Step 5: Test and activate your TheHive 5 and AlienVault workflow

Build your own AlienVault and TheHive 5 integration

Supported API Endpoints for AlienVault

TheHive 5 supported actions

AlienVault and TheHive 5 integration details

The SOAR platform you want

Save engineering resources

AlienVault and TheHive 5 integration tutorials

A guide to incident response playbooks

FAQs

Can AlienVault connect with TheHive 5?

Can I use AlienVault’s API with n8n?

Can I use TheHive 5’s API with n8n?

Is n8n secure for integrating AlienVault and TheHive 5?

How to get started with AlienVault and TheHive 5 integration in n8n.io?

Over 3000 companies switch to n8n every single week

Why use n8n to integrate AlienVault with TheHive 5

Build complex workflows, really fast

Code when you need it, UI when you don't

Simple debugging

Use templates to get started fast

Reuse your work