自動化された無料IP分析

中級

これはSecOps, AI Summarization分野の自動化ワークフローで、8個のノードを含みます。主にSet, Slack, Webhook, ExecuteWorkflowなどのノードを使用。 自動化された無料IP分析:NixGuard AI要約とWazuhの統合

前提条件
  • Slack Bot Token または Webhook URL
  • HTTP Webhookエンドポイント(n8nが自動生成)
ワークフロープレビュー
ノード接続関係を可視化、ズームとパンをサポート
ワークフローをエクスポート
以下のJSON設定をn8nにインポートして、このワークフローを使用できます
{
  "meta": {
    "instanceId": "558d88703fb65b2d0e44613bc35916258b0f0bf983c5d4730c00c424b77ca36a",
    "templateCredsSetupCompleted": true
  },
  "nodes": [
    {
      "id": "4e688357-b526-4ec6-aa52-ba57bef8ceea",
      "name": "NixGuard & Wazuhワークフローの実行",
      "type": "n8n-nodes-base.executeWorkflow",
      "position": [
        -420,
        -1220
      ],
      "parameters": {
        "options": {},
        "workflowId": {
          "__rl": true,
          "mode": "list",
          "value": "I0nUORqYTwDFZa51",
          "cachedResultName": "Get Real-Time Security Insights with NixGuard RAG and Wazuh Integration"
        },
        "workflowInputs": {
          "value": {},
          "schema": [],
          "mappingMode": "passThrough",
          "matchingColumns": [],
          "attemptToConvertTypes": false,
          "convertFieldsToString": true
        }
      },
      "typeVersion": 1.2
    },
    {
      "id": "c1ec5184-46b1-4893-a021-966b95e46c01",
      "name": "NixGuard AIサマリーとWazuhインサイトのフォーマット",
      "type": "n8n-nodes-base.set",
      "position": [
        -200,
        -1220
      ],
      "parameters": {
        "values": {
          "string": [
            {
              "name": "ai_summary",
              "value": "={{ $json.output }}"
            }
          ]
        },
        "options": {}
      },
      "typeVersion": 2
    },
    {
      "id": "698377ac-1c77-45fe-b877-eff606701b82",
      "name": "(オプション)高リスクイベントのSlackアラート送信",
      "type": "n8n-nodes-base.slack",
      "disabled": true,
      "position": [
        40,
        -1220
      ],
      "webhookId": "754f208d-453b-4202-a61a-18a5dce12a9d",
      "parameters": {
        "text": "=🚨 *NixGuard IP Analysis* 🚨\n\n*AI Summary:*\n{{ $json.ai_summary }}",
        "otherOptions": {},
        "authentication": "oAuth2"
      },
      "typeVersion": 2
    },
    {
      "id": "c534132a-9320-42fc-9db2-786725257cd6",
      "name": "次のステップ:自動応答",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -200,
        -1000
      ],
      "parameters": {
        "color": 7,
        "width": 520,
        "height": 380,
        "content": "## ⚡ Next Steps: Automate Your SOC/IR Process\n\nThis workflow doesn't just get data; it helps you take action. The `Set` node formats the powerful insights from NixGuard and Wazuh.\n\nFrom here, you can automate your entire security response:\n- **Enable the Slack Node**: Add your credentials to immediately start receiving alerts.\n- **Create Jira Tickets**: Add a Jira node to automatically create an incident ticket for high-risk events.\n- **Log Results**: Connect a Google Sheets or database node to log every analysis for auditing.\n- **Trigger Remediation**: Connect another `Execute Workflow` node to a workflow that blocks the malicious IP on your firewall."
      },
      "typeVersion": 1
    },
    {
      "id": "cfef93de-f471-410a-b326-ae50f810172c",
      "name": "APIキーと初期プロンプトの設定",
      "type": "n8n-nodes-base.set",
      "position": [
        -640,
        -1220
      ],
      "parameters": {
        "values": {
          "string": [
            {
              "name": "apiKey",
              "value": ""
            },
            {
              "name": "chatInput",
              "value": "Scan this ip for me 192.227.217.219"
            }
          ]
        },
        "options": {}
      },
      "typeVersion": 2
    },
    {
      "id": "9f8c29b7-c2fc-4ac2-895c-2e3b1d68bde2",
      "name": "Webhookトリガー",
      "type": "n8n-nodes-base.webhook",
      "active": false,
      "position": [
        -640,
        -980
      ],
      "webhookId": "79b37c02-e2d7-4648-9d54-b5f7786411cd",
      "parameters": {
        "path": "my-analysis-webhook",
        "options": {}
      },
      "typeVersion": 1
    },
    {
      "id": "b5f50c3b-d692-41e2-8077-a2d6f6e975be",
      "name": "(実世界での使用例)",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -1260,
        -1220
      ],
      "parameters": {
        "color": 7,
        "width": 540,
        "height": 440,
        "content": "## 🎯 Workflow Overview: The Dispatcher\n\nThis workflow acts as a **Dispatcher**. Its only job is to provide an input and API key to trigger your main, more complex analysis workflow:\n\n`Get Real-Time Security Insights with NixGuard RAG and Wazuh Integration`\n\nThis powerful combination uses NixGuard's AI to analyze security data from sources like Wazuh.\n\n### Why use this pattern?\n- **Reusable Logic**: Build your complex NixGuard & Wazuh analysis once and trigger it from many different places.\n- **Simplicity & Focus**: This workflow handles the \"how\" and \"when\" of starting the job, while the main workflow handles the \"what\".\n\n---\n**Learn more about NixGuard:** https://nixguard.thenex.world"
      },
      "typeVersion": 1
    },
    {
      "id": "2f909465-6db7-4508-9156-8283197a42f5",
      "name": "ワークフロー概要",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -640,
        -1740
      ],
      "parameters": {
        "color": 7,
        "width": 460,
        "height": 440,
        "content": "## ⚙️ **CRITICAL SETUP (2 STEPS)**\n\nThis template requires two actions to function correctly.\n\n**1. Add Your API Key:**\n   - Click the blue `Set API Key & Initial Prompt` node.\n   - In the `apiKey` field, replace `PASTE_YOUR_NIXGUARD_API_KEY_HERE` with your actual NixGuard API key.\n\n**2. Connect the Main Workflow:**\n   - Click the `Execute NixGuard & Wazuh Workflow` node.\n   - In the `Workflow` field, select your `Get Real-Time Security Insights...` workflow.\n\n   - **Don't have the main workflow yet?** Get it here:\n   https://n8n.io/workflows/4693-get-real-time-security-insights-with-nixguard-rag-and-wazuh-integration/"
      },
      "typeVersion": 1
    }
  ],
  "pinData": {},
  "connections": {
    "cfef93de-f471-410a-b326-ae50f810172c": {
      "main": [
        [
          {
            "node": "4e688357-b526-4ec6-aa52-ba57bef8ceea",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "4e688357-b526-4ec6-aa52-ba57bef8ceea": {
      "main": [
        [
          {
            "node": "c1ec5184-46b1-4893-a021-966b95e46c01",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "c1ec5184-46b1-4893-a021-966b95e46c01": {
      "main": [
        [
          {
            "node": "698377ac-1c77-45fe-b877-eff606701b82",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}
よくある質問

このワークフローの使い方は?

上記のJSON設定コードをコピーし、n8nインスタンスで新しいワークフローを作成して「JSONからインポート」を選択、設定を貼り付けて認証情報を必要に応じて変更してください。

このワークフローはどんな場面に適していますか?

中級 - セキュリティ運用, AI要約

有料ですか?

このワークフローは完全無料です。ただし、ワークフローで使用するサードパーティサービス(OpenAI APIなど)は別途料金が発生する場合があります。

関連ワークフロー

ワークフロー情報
難易度
中級
ノード数8
カテゴリー2
ノードタイプ5
難易度説明

経験者向け、6-15ノードの中程度の複雑さのワークフロー

作成者
Jonathan | NEX

Jonathan | NEX

@nex

Engineer, Builder, AI enthusiast

外部リンク
n8n.ioで表示

このワークフローを共有

カテゴリー

カテゴリー: 34