Deployed n8n workflow engine, connecting Wazuh to Telegram, automated security reports, webhook bridge — 80% reduction in manual operations, 10x faster issue detection.
Manual processes were causing multiple problems:
Deployed n8n workflow engine as Docker containers with PostgreSQL backend. Ready to scale horizontally, easy backup/restore.
When Wazuh detects new vulnerabilities or anomalies, n8n receives webhook, processes data (severity classification, CVE extraction), formats message, sends real-time Telegram alert with reference links.
Every morning at 07:00 ICT, n8n runs: queries Wazuh Indexer (OpenSearch) for new vulnerabilities, queries Zabbix for peak metrics, generates concise report, sends via Telegram.
Bridge between incompatible systems. Receives data from system A via webhook, transforms format (JSON/XML/CSV), sends to system B. Error handling, retry, full logging.