theHive.json•16.3 kB
{
"nodeType": "n8n-nodes-base.theHive",
"displayName": "TheHive",
"description": "Consume TheHive API",
"version": 1,
"properties": [
{
"name": "returnAll",
"displayName": "Return All",
"type": "boolean",
"default": false,
"description": "Whether to return all results or only up to a given limit",
"displayOptions": {
"show": {
"operation": [
"getAll"
],
"resource": [
"alert"
]
}
}
},
{
"name": "limit",
"displayName": "Limit",
"type": "number",
"default": 100,
"description": "Max number of results to return",
"typeOptions": {
"minValue": 1,
"maxValue": 500
},
"displayOptions": {
"show": {
"operation": [
"getAll"
],
"resource": [
"alert"
],
"returnAll": [
false
]
}
}
},
{
"name": "id",
"displayName": "Alert ID",
"type": "string",
"default": "",
"description": "Title of the alert",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"promote",
"markAsRead",
"markAsUnread",
"merge",
"update",
"executeResponder",
"get"
]
}
}
},
{
"name": "caseId",
"displayName": "Case ID",
"type": "string",
"default": "",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"merge"
]
}
}
},
{
"name": "title",
"displayName": "Title",
"type": "string",
"default": "",
"description": "Title of the alert",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "description",
"displayName": "Description",
"type": "string",
"default": "",
"description": "Description of the alert",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "severity",
"displayName": "Severity",
"type": "options",
"default": 2,
"description": "Severity of the alert. Default=Medium.",
"required": true,
"options": [
{
"name": "Low",
"value": 1
},
{
"name": "Medium",
"value": 2
},
{
"name": "High",
"value": 3
}
],
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "date",
"displayName": "Date",
"type": "dateTime",
"default": "",
"description": "Date and time when the alert was raised default=now",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "tags",
"displayName": "Tags",
"type": "string",
"default": "",
"description": "Case Tags",
"placeholder": "tag,tag2,tag3...",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "tlp",
"displayName": "TLP",
"type": "options",
"default": 2,
"description": "Traffict Light Protocol (TLP). Default=Amber.",
"required": true,
"options": [
{
"name": "White"
},
{
"name": "Green"
},
{
"name": "Amber"
},
{
"name": "Red"
}
],
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "status",
"displayName": "Status",
"type": "options",
"default": "New",
"description": "Status of the alert",
"required": true,
"options": [
{
"name": "New",
"value": "New"
},
{
"name": "Updated",
"value": "Updated"
},
{
"name": "Ignored",
"value": "Ignored"
},
{
"name": "Imported",
"value": "Imported"
}
],
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "type",
"displayName": "Type",
"type": "string",
"default": "",
"description": "Type of the alert",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "source",
"displayName": "Source",
"type": "string",
"default": "",
"description": "Source of the alert",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "sourceRef",
"displayName": "SourceRef",
"type": "string",
"default": "",
"description": "Source reference of the alert",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "follow",
"displayName": "Follow",
"type": "boolean",
"default": true,
"description": "Whether the alert becomes active when updated default=true",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "artifactUi",
"displayName": "Artifacts",
"type": "fixedCollection",
"default": {},
"description": "Type of the observable. Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>.",
"placeholder": "Add Artifact",
"typeOptions": {
"multipleValues": true
},
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "responder",
"displayName": "Responder Name or ID",
"type": "options",
"default": "",
"description": "Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"executeResponder"
]
}
}
},
{
"name": "jsonParameters",
"displayName": "JSON Parameters",
"type": "boolean",
"default": true,
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create",
"update"
]
}
}
},
{
"name": "additionalFields",
"displayName": "Additional Fields",
"type": "collection",
"default": {},
"description": "Case template to use when a case is created from this alert",
"placeholder": "Add Field",
"options": [
{
"name": "caseTemplate",
"displayName": "Case Template",
"type": "string",
"default": "",
"description": "Case template to use when a case is created from this alert"
}
],
"typeOptions": {
"multipleValues": true
},
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"create"
]
}
}
},
{
"name": "updateFields",
"displayName": "Update Fields",
"type": "collection",
"default": {},
"description": "Type of the observable. Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>.",
"placeholder": "Add Field",
"typeOptions": {
"multipleValues": true
},
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"update"
]
}
}
},
{
"name": "options",
"displayName": "Options",
"type": "collection",
"default": {},
"placeholder": "Add option",
"options": [
{
"name": "sort",
"displayName": "Sort",
"type": "string",
"default": "",
"placeholder": "±Attribut, exp +status"
}
],
"displayOptions": {
"show": {
"operation": [
"getAll"
],
"resource": [
"alert"
]
}
}
},
{
"name": "filters",
"displayName": "Filters",
"type": "collection",
"default": {},
"description": "Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>",
"placeholder": "Add Filter",
"typeOptions": {
"multipleValues": true
},
"displayOptions": {
"show": {
"resource": [
"alert"
],
"operation": [
"getAll",
"count"
]
}
}
},
{
"name": "operation",
"displayName": "Operation Name or ID",
"type": "options",
"default": "create",
"description": "Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>",
"required": true,
"displayOptions": {
"show": {
"resource": [
"alert"
]
}
}
},
{
"name": "startDate",
"displayName": "Start Date",
"type": "dateTime",
"default": "",
"description": "Date and time of the begin of the case default=now",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
]
}
}
},
{
"name": "owner",
"displayName": "Owner",
"type": "string",
"default": "",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
]
}
}
},
{
"name": "flag",
"displayName": "Flag",
"type": "boolean",
"default": false,
"description": "Flag of the case default=false",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
]
}
}
},
{
"name": "taskId",
"displayName": "Task ID",
"type": "string",
"default": "",
"description": "ID of the task",
"required": true,
"displayOptions": {
"show": {
"resource": [
"log"
],
"operation": [
"create",
"getAll"
]
}
}
},
{
"name": "message",
"displayName": "Message",
"type": "string",
"default": "",
"description": "Content of the Log",
"required": true,
"displayOptions": {
"show": {
"resource": [
"log"
],
"operation": [
"create"
]
}
}
},
{
"name": "dataType",
"displayName": "Data Type Name or ID",
"type": "options",
"default": "",
"description": "Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>",
"required": true,
"displayOptions": {
"show": {
"resource": [
"observable"
],
"operation": [
"create",
"executeAnalyzer"
]
}
}
},
{
"name": "data",
"displayName": "Data",
"type": "string",
"default": "",
"required": true,
"displayOptions": {
"show": {
"resource": [
"observable"
],
"operation": [
"create"
]
}
}
},
{
"name": "binaryProperty",
"displayName": "Input Binary Field",
"type": "string",
"default": "data",
"description": "The name of the input binary field that represent the attachment file",
"required": true,
"displayOptions": {
"show": {
"resource": [
"observable"
],
"operation": [
"create"
],
"dataType": [
"file"
]
}
}
},
{
"name": "ioc",
"displayName": "IOC",
"type": "boolean",
"default": false,
"description": "Whether the observable is an IOC (Indicator of compromise)",
"required": true,
"displayOptions": {
"show": {
"resource": [
"observable"
],
"operation": [
"create"
]
}
}
},
{
"name": "sighted",
"displayName": "Sighted",
"type": "boolean",
"default": false,
"description": "Whether sighted previously",
"required": true,
"displayOptions": {
"show": {
"resource": [
"observable"
],
"operation": [
"create"
]
}
}
},
{
"name": "analyzers",
"displayName": "Analyzer Names or IDs",
"type": "multiOptions",
"default": [],
"description": "Choose from the list, or specify IDs using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>",
"required": true,
"displayOptions": {
"show": {
"resource": [
"observable"
],
"operation": [
"executeAnalyzer"
]
}
}
},
{
"name": "resource",
"displayName": "Resource",
"type": "options",
"default": "alert",
"required": true,
"options": [
{
"name": "Alert",
"value": "alert"
},
{
"name": "Case",
"value": "case"
},
{
"name": "Log",
"value": "log"
},
{
"name": "Observable",
"value": "observable"
},
{
"name": "Task",
"value": "task"
}
]
}
],
"credentialsConfig": [
{
"name": "theHiveApi",
"required": true
},
{
"name": "resource",
"required": true
}
],
"io": {
"inputs": [],
"outputs": [],
"outputNames": [],
"hints": {}
},
"wiring": {
"role": "generic",
"requires": [],
"optional": [],
"consumedBy": [],
"consumes": [],
"produces": []
}
}