elasticSecurity.json•17.5 kB
{
"nodeType": "n8n-nodes-base.elasticSecurity",
"displayName": "Elastic Security",
"description": "Consume the Elastic Security API",
"version": 1,
"properties": [
{
"name": "caseId",
"displayName": "Case ID",
"type": "string",
"default": "",
"description": "ID of the case containing the comment to retrieve",
"required": true,
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"add"
]
}
}
},
{
"name": "comment",
"displayName": "Comment",
"type": "string",
"default": "",
"required": true,
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"add"
]
}
}
},
{
"name": "simple",
"displayName": "Simplify",
"type": "boolean",
"default": true,
"description": "Whether to return a simplified version of the response instead of the raw data",
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"add"
]
}
}
},
{
"name": "additionalFields",
"displayName": "Additional Fields",
"type": "collection",
"default": {},
"description": "Valid application owner registered within the Cases Role Based Access Control system",
"placeholder": "Add Field",
"options": [
{
"name": "owner",
"displayName": "Owner",
"type": "string",
"default": "",
"description": "Valid application owner registered within the Cases Role Based Access Control system"
}
],
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"add"
]
}
}
},
{
"name": "commentId",
"displayName": "Comment ID",
"type": "string",
"default": "",
"description": "ID of the case comment to retrieve",
"required": true,
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"get"
]
}
}
},
{
"name": "returnAll",
"displayName": "Return All",
"type": "boolean",
"default": false,
"description": "Whether to return all results or only up to a given limit",
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"getAll"
]
}
}
},
{
"name": "limit",
"displayName": "Limit",
"type": "number",
"default": 50,
"description": "Max number of results to return",
"typeOptions": {
"minValue": 1
},
"displayOptions": {
"show": {
"resource": [
"caseComment"
],
"operation": [
"getAll"
],
"returnAll": [
false
]
}
}
},
{
"name": "operation",
"displayName": "Operation",
"type": "options",
"default": "add",
"description": "Add a comment to a case",
"options": [
{
"name": "Add",
"value": "add",
"description": "Add a comment to a case"
},
{
"name": "Get",
"value": "get",
"description": "Get a case comment"
},
{
"name": "Get Many",
"value": "getAll",
"description": "Retrieve many case comments"
},
{
"name": "Remove",
"value": "remove",
"description": "Remove a comment from a case"
},
{
"name": "Update",
"value": "update",
"description": "Update a comment in a case"
}
],
"displayOptions": {
"show": {
"resource": [
"caseComment"
]
}
}
},
{
"name": "title",
"displayName": "Title",
"type": "string",
"default": "",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
]
}
}
},
{
"name": "connectorId",
"displayName": "Connector Name or ID",
"type": "options",
"default": "",
"description": "Connectors allow you to send Elastic Security cases into other systems (only ServiceNow, Jira, or IBM Resilient). Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>.",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
]
}
}
},
{
"name": "connectorType",
"displayName": "Connector Type",
"type": "options",
"default": ".jira",
"required": true,
"options": [
{
"name": "IBM Resilient",
"value": ".resilient"
},
{
"name": "Jira",
"value": ".jira"
},
{
"name": "ServiceNow ITSM",
"value": ".servicenow"
}
],
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
]
}
}
},
{
"name": "issueType",
"displayName": "Issue Type",
"type": "string",
"default": "",
"description": "Type of the Jira issue to create for this case",
"placeholder": "Task",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".jira"
]
}
}
},
{
"name": "priority",
"displayName": "Priority",
"type": "string",
"default": "",
"description": "Priority of the Jira issue to create for this case",
"placeholder": "High",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".jira"
]
}
}
},
{
"name": "urgency",
"displayName": "Urgency",
"type": "options",
"default": 1,
"description": "Urgency of the ServiceNow ITSM issue to create for this case",
"required": true,
"options": [
{
"name": "Low",
"value": 1
},
{
"name": "Medium",
"value": 2
},
{
"name": "High",
"value": 3
}
],
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".servicenow"
]
}
}
},
{
"name": "severity",
"displayName": "Severity",
"type": "options",
"default": 1,
"description": "Severity of the ServiceNow ITSM issue to create for this case",
"required": true,
"options": [
{
"name": "Low",
"value": 1
},
{
"name": "Medium",
"value": 2
},
{
"name": "High",
"value": 3
}
],
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".servicenow"
]
}
}
},
{
"name": "impact",
"displayName": "Impact",
"type": "options",
"default": 1,
"description": "Impact of the ServiceNow ITSM issue to create for this case",
"required": true,
"options": [
{
"name": "Low",
"value": 1
},
{
"name": "Medium",
"value": 2
},
{
"name": "High",
"value": 3
}
],
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".servicenow"
]
}
}
},
{
"name": "category",
"displayName": "Category",
"type": "string",
"default": "",
"description": "Category of the ServiceNow ITSM issue to create for this case",
"placeholder": "Helpdesk",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".servicenow"
]
}
}
},
{
"name": "issueTypes",
"displayName": "Issue Types",
"type": "string",
"default": "",
"description": "Comma-separated list of numerical types of the IBM Resilient issue to create for this case",
"placeholder": "123,456",
"required": true,
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".resilient"
]
}
}
},
{
"name": "severityCode",
"displayName": "Severity Code",
"type": "number",
"default": 1,
"description": "Severity code of the IBM Resilient issue to create for this case",
"required": true,
"typeOptions": {
"minValue": 0
},
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"create"
],
"connectorType": [
".resilient"
]
}
}
},
{
"name": "filters",
"displayName": "Filters",
"type": "collection",
"default": {},
"description": "Choose from the list, or specify IDs using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>",
"placeholder": "Add Filter",
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"getAll"
]
}
}
},
{
"name": "sortOptions",
"displayName": "Sort",
"type": "fixedCollection",
"default": {},
"placeholder": "Add Sort Options",
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"getAll"
]
}
}
},
{
"name": "updateFields",
"displayName": "Update Fields",
"type": "collection",
"default": {},
"description": "Whether to synchronize with alerts",
"placeholder": "Add Field",
"options": [
{
"name": "description",
"displayName": "Description",
"type": "string",
"default": ""
}
],
"displayOptions": {
"show": {
"resource": [
"case"
],
"operation": [
"update"
]
}
}
},
{
"name": "tag",
"displayName": "Tag Name or ID",
"type": "options",
"default": "",
"description": "Tag to attach to the case. Choose from the list, or specify an ID using an <a href=\"https://docs.n8n.io/code/expressions/\">expression</a>.",
"required": true,
"displayOptions": {
"show": {
"resource": [
"caseTag"
],
"operation": [
"add"
]
}
}
},
{
"name": "name",
"displayName": "Connector Name",
"type": "string",
"default": "",
"description": "Connectors allow you to send Elastic Security cases into other systems (only ServiceNow, Jira, or IBM Resilient)",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
]
}
}
},
{
"name": "apiUrl",
"displayName": "API URL",
"type": "string",
"default": "",
"description": "URL of the third-party instance",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
]
}
}
},
{
"name": "email",
"displayName": "Email",
"type": "string",
"default": "",
"description": "Jira-registered email",
"placeholder": "name@email.com",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".jira"
]
}
}
},
{
"name": "apiToken",
"displayName": "API Token",
"type": "string",
"default": "",
"description": "Jira API token",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".jira"
]
}
}
},
{
"name": "projectKey",
"displayName": "Project Key",
"type": "string",
"default": "",
"description": "Jira Project Key",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".jira"
]
}
}
},
{
"name": "username",
"displayName": "Username",
"type": "string",
"default": "",
"description": "ServiceNow ITSM username",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".servicenow"
]
}
}
},
{
"name": "password",
"displayName": "Password",
"type": "string",
"default": "",
"description": "ServiceNow ITSM password",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".servicenow"
]
}
}
},
{
"name": "apiKeyId",
"displayName": "API Key ID",
"type": "string",
"default": "",
"description": "IBM Resilient API key ID",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".resilient"
]
}
}
},
{
"name": "apiKeySecret",
"displayName": "API Key Secret",
"type": "string",
"default": "",
"description": "IBM Resilient API key secret",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".resilient"
]
}
}
},
{
"name": "orgId",
"displayName": "Organization ID",
"type": "string",
"default": "",
"description": "IBM Resilient organization ID",
"required": true,
"displayOptions": {
"show": {
"resource": [
"connector"
],
"operation": [
"create"
],
"connectorType": [
".resilient"
]
}
}
},
{
"name": "resource",
"displayName": "Resource",
"type": "options",
"default": "case",
"options": [
{
"name": "Case",
"value": "case"
},
{
"name": "Case Comment",
"value": "caseComment"
},
{
"name": "Case Tag",
"value": "caseTag"
},
{
"name": "Connector",
"value": "connector"
}
]
}
],
"credentialsConfig": [
{
"name": "elasticSecurityApi",
"required": true
},
{
"name": "resource",
"required": false
}
],
"io": {
"inputs": [
"Main"
],
"outputs": [
"Main"
],
"outputNames": [],
"hints": {}
},
"wiring": {
"role": "generic",
"requires": [],
"optional": [],
"consumedBy": [],
"consumes": [
"Main"
],
"produces": [
"Main"
]
}
}