TheHive node

Use the TheHive node to automate work in TheHive, and integrate TheHive with other applications. n8n has built-in support for a wide range of TheHive features, including creating alerts, counting tasks logs, cases, and observables.

On this page, you’ll find a list of operations the TheHive node supports and links to more resources.

Note

TheHive and TheHive 5 n8n provides two nodes for TheHive. Use this node (TheHive) if you want to use TheHive’s version 3 or 4 API. If you want to use version 5, use TheHive 5.

Note

Credentials Refer to TheHive credentials for guidance on setting up authentication.

Operations

The available operations depend on your API version. To see the operations list, create your credentials, including selecting your API version. Then return to the node, select the resource you want to use, and n8n displays the available operations for your API version.

  • Alert

  • Case

  • Log

  • Observable

  • Task

Templates and examples

What to do if your operation isn’t supported

If this node doesn’t support the operation you want to do, you can use the HTTP Request node to call the service’s API.

You can use the credential you created for this service in the HTTP Request node:

  1. In the HTTP Request node, select Authentication > Predefined Credential Type.

  2. Select the service you want to connect to.

  3. Select your credential.

Refer to Custom API operations for more information.