Skip to content

TheHive 5#

Use the TheHive 5 node to automate work in TheHive, and integrate TheHive with other applications. n8n has built-in support for a wide range of TheHive features, including creating alerts, counting tasks logs, cases, and observables.

On this page, you'll find a list of operations the TheHive node supports and links to more resources.

TheHive and TheHive 5

n8n provides two nodes for TheHive. Use this node (TheHive 5) if you want to use TheHive's version 5 API. If you want to use version 3 or 4, use TheHive.

Credentials

Refer to TheHive credentials for guidance on setting up authentication.

Operations#

  • Alert
    • Create
    • Delete
    • Execute Responder
    • Get
    • Merge Into Case
    • Promote to Case
    • Search
    • Update
    • Update Status
  • Case
    • Add Attachment
    • Create
    • Delete Attachment
    • Delete Case
    • Execute Responder
    • Get
    • Get Attachment
    • Get Timeline
    • Search
    • Update
  • Comment
    • Create
    • Delete
    • Search
    • Update
  • Observable
    • Create
    • Delete
    • Execute Analyzer
    • Execute Responder
    • Get
    • Search
    • Update
  • Page
    • Create
    • Delete
    • Search
    • Update
  • Query
    • Execute Query
  • Task
    • Create
    • Delete
    • Execute Responder
    • Get
    • Search
    • Update
  • Task Log
    • Add Attachment
    • Create
    • Delete
    • Delete Attachment
    • Execute Responder
    • Get
    • Search

Templates and examples#

Analyze emails with S1EM

by v1d1an

View template details
Weekly Shodan Query - Report Accidents

by n8n Team

View template details
Create, update and get a case in TheHive

by ghagrawal17

View template details
Browse TheHive 5 integration templates, or search all templates

n8n provides a trigger node for TheHive. You can find the trigger node docs here.

Refer to TheHive's documentation for more information about the service.