In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.
Create custom Elastic Security and Recorded Future workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.
Create
Create a case
Delete
Delete a case
Get
Get a case
Get Many
Retrieve many cases
Get Status
Retrieve a summary of all case activity
Update
Update a case
Add
Add a comment to a case
Get
Get a case comment
Get Many
Retrieve many case comments
Remove
Remove a comment from a case
Update
Update a comment in a case
Add
Add a tag to a case
Remove
Remove a tag from a case
Create
Create a connector
GetEntity
Retrieve details of a specific entity.
SearchEntities
Search for entities based on criteria.
ListEntityTypes
List all entity types available.
GetEntityAssociations
Retrieve associations for a specific entity.
GetEntityRiskScore
Retrieve risk score for a specific entity.
GetAlerts
Retrieve a list of alerts.
GetAlertDetails
Retrieve details of a specific alert.
CreateAlert
Create a new alert.
UpdateAlert
Update an existing alert.
DeleteAlert
Delete a specific alert.
GetIntelligence
Retrieve intelligence for a specific query.
SearchIntelligence
Search for intelligence data.
GetIntelligenceTrending
Retrieve trending intelligence data.
GetIntelligenceByCategory
Retrieve intelligence data by category.
GetIntelligenceSummary
Retrieve summary of intelligence data.
GetRiskLists
Retrieve a list of risk lists.
GetRiskListDetails
Retrieve details of a specific risk list.
CreateRiskList
Create a new risk list.
UpdateRiskList
Update an existing risk list.
DeleteRiskList
Delete a specific risk list.
To set up Recorded Future integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to Recorded Future to query the data you need using the URLs you provide.
Take a look at the Recorded Future official documentation to get a full list of all API endpoints
With Elastic Security, you can prevent, detect, and respond to attacks on your organization. Years of data are analyzed by Elastic Security, which also automates crucial procedures and secures every system.
Elastic Security node docs + examples
Elastic Security credential docs
See Elastic Security integrations
Save engineering resources
Reduce time spent on customer integrations, engineer faster POCs, keep your customer-specific functionality separate from product all without having to code.
Learn more
The SOAR platform you want
Mountains of monotonous tasks make building and monitoring your workflows a chore. Not anymore.
Learn more
The world's most popular workflow automation platform for technical teams including
Build complex workflows, really fast