In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.
Create custom Elastic Security and Microsoft Entra ID workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.
Create
Create a case
Delete
Delete a case
Get
Get a case
Get Many
Retrieve many cases
Get Status
Retrieve a summary of all case activity
Update
Update a case
Add
Add a comment to a case
Get
Get a case comment
Get Many
Retrieve many case comments
Remove
Remove a comment from a case
Update
Update a comment in a case
Add
Add a tag to a case
Remove
Remove a tag from a case
Create
Create a connector
Create
Create a group
Delete
Delete a group
Get
Retrieve data for a specific group
Get Many
Retrieve a list of groups
Update
Update a group
Add to Group
Add user to group
Create
Create a user
Delete
Delete a user
Get
Retrieve data for a specific user
Get Many
Retrieve a list of users
Remove from Group
Remove user from group
Update
Update a user
With Elastic Security, you can prevent, detect, and respond to attacks on your organization. Years of data are analyzed by Elastic Security, which also automates crucial procedures and secures every system.
Elastic Security node docs + examples
Elastic Security credential docs
See Elastic Security integrations
Microsoft Entra ID node docs + examples
Microsoft Entra ID credential docs
See Microsoft Entra ID integrations
The world's most popular workflow automation platform for technical teams including
Build complex workflows, really fast