{ "edges": [ { "to": "83b5badf-9680-4939-8fd2-65a9a6783e62", "from": "3216f044-4cf7-4b43-8d56-2f004eabf7df", "toPort": "0", "fromPort": "0" }, { "to": "33479a52-d8b5-423e-848f-069c9838b8b4", "from": "95e5f8d6-52e2-4e2e-b901-fb2ba0fae809", "toPort": "0", "fromPort": "0" }, { "to": "4dc8477d-0bba-4646-8385-f126c24836fd", "from": "83b5badf-9680-4939-8fd2-65a9a6783e62", "toPort": "0", "fromPort": "0" }, { "to": "3216f044-4cf7-4b43-8d56-2f004eabf7df", "from": "24a3ac3b-9293-42bc-99b7-e5902e38c009", "toPort": "0", "fromPort": "0" }, { "to": "5bbb2c29-5ac2-4046-9ed9-e14053559e35", "from": "24a3ac3b-9293-42bc-99b7-e5902e38c009", "toPort": "0", "fromPort": "1" }, { "to": "65c40d32-8eef-4f6d-a25a-ad132a390047", "from": "4dc8477d-0bba-4646-8385-f126c24836fd", "toPort": "0", "fromPort": "0" }, { "to": "ffe18b38-ab44-4e30-8e91-ed2d22b7ac96", "from": "4dc8477d-0bba-4646-8385-f126c24836fd", "toPort": "0", "fromPort": "0" }, { "to": "2e2754dc-ab7c-4cf0-b5da-60b4fcd9381b", "from": "33479a52-d8b5-423e-848f-069c9838b8b4", "toPort": "0", "fromPort": "0" }, { "to": "24a3ac3b-9293-42bc-99b7-e5902e38c009", "from": "fce8aeae-dd7b-4c60-93ca-2e79d70201a6", "toPort": "0", "fromPort": "0" }, { "to": "fce8aeae-dd7b-4c60-93ca-2e79d70201a6", "from": "2e2754dc-ab7c-4cf0-b5da-60b4fcd9381b", "toPort": "0", "fromPort": "0" } ], "nodes": [ { "id": "95e5f8d6-52e2-4e2e-b901-fb2ba0fae809", "name": "Webhook", "type": "trigger", "params": { "kind": "n8n-nodes-base.webhook", "path": "incident-report", "options": {}, "httpMethod": "POST" }, "position": [ 1488, 432 ] }, { "id": "4dc8477d-0bba-4646-8385-f126c24836fd", "name": "Convert to PDF", "type": "integration", "params": { "service": "htmlcsstopdf", "operation": "run", "html_content": "=\n\n\n \n \n \n\n\n

\n \n\n

📋 Incident ID

\n \n

👤 Reported By

\n \n

📅 Timestamp

\n \n

🖥️ Affected Systems

\n\n

Incident Title

{{ $json.title }}

\n\n

Description

\n\n

Initial Impact

\n\n

Root Cause Analysis

\n\n

Impact Assessment

\n\n

Immediate Actions

' + action + '

\n\n

Long-term Actions

' + action + '

\n\n \n

\n\n\n", "output_format": "file", "__originalType": "n8n-nodes-htmlcsstopdf.htmlcsstopdf", "output_filename": "data" }, "position": [ 3200, 320 ] }, { "id": "33479a52-d8b5-423e-848f-069c9838b8b4", "name": "Normalize Data", "type": "set", "params": { "options": { "ignoreConversionErrors": true }, "assignments": { "assignments": [ { "id": "b7da0a8d-7a73-4d43-b362-59d306256c7d", "name": "incident_id", "type": "string", "value": "={{ $json.body.incident_id }}" }, { "id": "05959192-fd6c-4027-bb18-7603e93c1c8e", "name": "title", "type": "string", "value": "={{ $json.body.title }}" }, { "id": "f66aada4-d9a8-4b92-8e0b-7991094f9ae9", "name": "description", "type": "string", "value": "={{ $json.body.description }}" }, { "id": "05ab36a5-df38-4bb9-93bb-637ded12c74e", "name": "severity", "type": "string", "value": "={{ $json.body.severity.toLowerCase()}}" }, { "id": "3d2e598f-eb48-415c-8456-266e18f0a1b0", "name": "reported_by", "type": "string", "value": "={{ $json.body.reported_by }}" }, { "id": "38b20757-c693-4a81-8c23-6e97a1c4c250", "name": "timestamp", "type": "string", "value": "={{ $json.body.timestamp }}" }, { "id": "a0c29ffa-8316-40b1-8f91-e36995cb1908", "name": "affected_systems", "type": "array", "value": "={{ $json.body.affected_systems.join(', ') }}" }, { "id": "41454f8f-2c62-4418-a419-86bfb3628b3b", "name": "initial_impact", "type": "string", "value": "={{ $json.body.initial_impact }}" }, { "id": "7c8a2147-e72c-4b0e-afb6-9bdf1c31a70f", "name": "report_generated_at", "type": "string", "value": "={{ $now.toFormat('yyyy-MM-dd HH:mm:ss') }}" } ] } }, "position": [ 1744, 432 ] }, { "id": "2e2754dc-ab7c-4cf0-b5da-60b4fcd9381b", "name": "Root Cause + Impact Analysis", "type": "llm", "params": { "modelId": { "__rl": true, "mode": "list", "value": "gpt-4", "cachedResultName": "GPT-4" }, "options": { "temperature": 0.7 }, "provider": "openai", "responses": { "values": [ { "role": "system", "content": "=You are an expert incident analyst. Analyze the following incident and provide:\n1. Root Cause Analysis (likely causes)\n2. Impact Assessment (business and technical impact)\n3. Recommended Actions (immediate and long-term)\n\nFormat your response as JSON with these exact keys:\n{\n \"root_cause\": \"detailed analysis\",\n \"impact_assessment\": \"business and technical impact\",\n \"immediate_actions\": [\"action 1\", \"action 2\"],\n \"long_term_actions\": [\"action 1\", \"action 2\"]\n}" }, { "content": "=Incident ID: {{ $json.incident_id }}\nTitle: {{ $json.title }}\nDescription: {{ $json.description }}\nSeverity: {{ $json.severity }}\nAffected Systems: {{ $json.affected_systems }}\nInitial Impact: {{ $json.initial_impact }}" } ] }, "temperature": 0.7, "builtInTools": {} }, "position": [ 2064, 432 ] }, { "id": "fce8aeae-dd7b-4c60-93ca-2e79d70201a6", "name": "Parse AI Response", "type": "code", "params": { "jsCode": "// Get the OpenAI response\nconst openAIOutput = $input.first().json;\n\n// The actual AI response is nested in: output[0].content[0].text\nconst aiResponseText = openAIOutput.output[0].content[0].text;\n\n// Parse the JSON string\nconst aiAnalysis = JSON.parse(aiResponseText);\n\n// Get the original incident data from the previous nodes\n// This assumes the webhook data is still in the item\nconst originalData = $('Normalize Data').first().json;\n\n// Combine everything together\nreturn [{\n json: {\n ...originalData, // All the original incident data\n root_cause: aiAnalysis.root_cause,\n impact_assessment: aiAnalysis.impact_assessment,\n immediate_actions: aiAnalysis.immediate_actions,\n long_term_actions: aiAnalysis.long_term_actions\n }\n}];" }, "position": [ 2384, 432 ] }, { "id": "24a3ac3b-9293-42bc-99b7-e5902e38c009", "name": "Check Severity", "type": "if", "params": { "options": {}, "conditions": { "options": { "version": 3, "leftValue": "", "caseSensitive": true, "typeValidation": "strict" }, "combinator": "and", "conditions": [ { "id": "23419f40-f589-45a0-9367-31aa0df9fe5a", "operator": { "type": "string", "operation": "equals" }, "leftValue": "={{ $json.severity }}", "rightValue": "high" } ] } }, "position": [ 2624, 432 ] }, { "id": "3216f044-4cf7-4b43-8d56-2f004eabf7df", "name": "Alerts", "type": "integration", "params": { "text": "=🚨 *HIGH SEVERITY INCIDENT REPORTED*\n\n*Incident ID*: {{ $json.incident_id }}\n*Title*: {{ $json.title }}\n*Reported By*: {{ $json.reported_by }}\n*Time*: {{ $json.timestamp }}\n\n*Initial Impact*: {{ $json.initial_impact }}\n*Affected Systems*: {{ $json.affected_systems }}\n\n*Root Cause*: {{ $json.root_cause }}\n\n*Immediate Actions Required*:\n- {{ $json.immediate_actions[0] }}\n- {{ $json.immediate_actions[1] }}\n\nFull report will be generated and sent to ops team shortly.", "select": "channel", "service": "slack", "channelId": { "__rl": true, "mode": "list", "value": "YOUR_CHANNEL_ID", "cachedResultName": "YOUR_CHANNEL_NAME" }, "operation": "read", "otherOptions": {} }, "position": [ 2816, 320 ] }, { "id": "83b5badf-9680-4939-8fd2-65a9a6783e62", "name": "Data Recovery", "type": "code", "params": { "jsCode": "// Get the original incident data from the Check Severity node\nconst incidentData = $('Check Severity').first().json;\n\n// Return the incident data (ignore Slack's response)\nreturn [{\n json: incidentData\n}];" }, "position": [ 2992, 320 ] }, { "id": "65c40d32-8eef-4f6d-a25a-ad132a390047", "name": "Upload file", "type": "integration", "params": { "name": "=Incident_{{ $('Data Recovery').item.json.incident_id }}_{{ $('Data Recovery').item.json.severity }}_{{ $now.format('YYYY-MM-DD_HHmmss') }}.pdf", "driveId": { "__rl": true, "mode": "list", "value": "My Drive" }, "options": {}, "service": "googleDrive", "folderId": { "__rl": true, "mode": "list", "value": "root", "cachedResultName": "YOUR_FOLDER_NAME" }, "operation": "read" }, "position": [ 3392, 432 ] }, { "id": "ffe18b38-ab44-4e30-8e91-ed2d22b7ac96", "name": "Send Email", "type": "integration", "params": { "sendTo": "=ops-team@yourcompany.com", "message": "=\n\n\n \n\n\n

\n \n\n

\n A new incident report has been generated and requires your immediate attention. \n Please review the details below and the attached PDF report.\n

\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

📋 Incident ID	{{ $('Data Recovery').item.json.incident_id }}
🔴 Severity Level	{{ $('Data Recovery').item.json.severity }}
📝 Title	{{ $('Data Recovery').item.json.title }}
👤 Reported By	{{ $('Data Recovery').item.json.reported_by }}
📅 Timestamp	{{ $('Data Recovery').item.json.timestamp }}
🖥️ Affected Systems	{{ $('Data Recovery').item.json.affected_systems }}

\n\n

💥 Initial Impact

\n\n

🔍 Root Cause Analysis

\n\n

⚡ Immediate Actions ({{$('Data Recovery').item.json.immediate_actions.length }})

' + action.substring(0, 80) + (action.length > 80 ? '...' : '') + '

\n\n

🎯 Long-term Actions ({{$('Data Recovery').item.json.long_term_actions.length }})

' + action.substring(0, 80) + (action.length > 80 ? '...' : '') + '

\n\n

\n 📎 Full detailed report attached as PDF\n

\n\n \n

\n\n", "options": { "attachmentsUi": { "attachmentsBinary": [ {} ] } }, "service": "gmail", "subject": "=[{{ $('Data Recovery').item.json.severity.toUpperCase() }}] Incident Report: {{ $('Data Recovery').item.json.title }} - {{$('Data Recovery').item.json.incident_id }}", "operation": "read" }, "position": [ 3392, 272 ] }, { "id": "5bbb2c29-5ac2-4046-9ed9-e14053559e35", "name": "Stop and Error", "type": "passthrough", "params": { "mode": "noOp", "errorMessage": "Severity is not HIGH!" }, "position": [ 2832, 496 ] } ] }

🚨 Incident Report

Incident Title

Description

Initial Impact

Root Cause Analysis

Impact Assessment

Immediate Actions

Long-term Actions

🚨 Incident Report Generated

💥 Initial Impact

🔍 Root Cause Analysis

⚡ Immediate Actions ({{$('Data Recovery').item.json.immediate_actions.length }})

🎯 Long-term Actions ({{$('Data Recovery').item.json.long_term_actions.length }})

Generate AI incident reports with GPT-4, Slack alerts, Gmail and PDF export