{
  "nodes": [
    {
      "id": "e4929773-39f9-4b8a-b462-235c37514479",
      "name": "Get Elastic Alert",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        620,
        440
      ],
      "parameters": {
        "url": "https://your-prism-elastic-api-endpoint.com/alerts",
        "options": {}
      },
      "typeVersion": 2
    },
    {
      "id": "973a8254-5ec0-4ea0-95b5-7e6a0f0625ab",
      "name": "Send Email Notification",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        1440,
        220
      ],
      "parameters": {
        "url": "https://graph.microsoft.com/v1.0/me/sendMail",
        "options": {
          "bodyContentType": "json"
        },
        "requestMethod": "POST",
        "authentication": "oAuth2",
        "jsonParameters": true,
        "bodyParametersJson": "={\n  \"message\": {\n    \"subject\": \"PRISM Elastic Alert: {{$json[\"alert_name\"]}}\",\n    \"body\": {\n      \"contentType\": \"HTML\",\n      \"content\": \"Hello,<br><br>An alert has been triggered:<br><strong>Alert Name:</strong> {{$json[\"alert_name\"]}}<br><strong>Severity:</strong> {{$json[\"severity\"]}}<br><strong>Timestamp:</strong> {{$json[\"timestamp\"]}}<br><br>Details:<br>{{$json[\"alert_message\"]}}<br><br>Regards,<br>PRISM Alert System\"\n    },\n    \"toRecipients\": [\n      {\n        \"emailAddress\": {\n          \"address\": \"user@example.com\"\n        }\n      }\n    ]\n  },\n  \"saveToSentItems\": \"true\"\n}"
      },
      "typeVersion": 2
    },
    {
      "id": "f7f4feee-6854-4997-ae15-870cab4abdbb",
      "name": "Schedule Trigger",
      "type": "n8n-nodes-base.scheduleTrigger",
      "position": [
        380,
        440
      ],
      "parameters": {
        "rule": {
          "interval": [
            {}
          ]
        }
      },
      "typeVersion": 1.2
    },
    {
      "id": "b8578c55-a052-43f2-9d6a-24d8084dae8a",
      "name": "Response is not empty",
      "type": "n8n-nodes-base.if",
      "position": [
        840,
        440
      ],
      "parameters": {
        "options": {}
      },
      "typeVersion": 2.1
    },
    {
      "id": "664216e6-c212-4f4b-8b09-60675c4fcd91",
      "name": "No Operation, do nothing",
      "type": "n8n-nodes-base.noOp",
      "position": [
        1100,
        680
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "bcead903-56ed-4ae8-bff9-cec274b2fe71",
      "name": "Loop Over Each Alert Items",
      "type": "n8n-nodes-base.splitInBatches",
      "position": [
        1100,
        200
      ],
      "parameters": {
        "options": {}
      },
      "typeVersion": 3
    },
    {
      "id": "a5e55903-a245-4d70-88e7-14c1f18cde25",
      "name": "No Operation, end of loop",
      "type": "n8n-nodes-base.noOp",
      "position": [
        1440,
        0
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "13535289-c9d2-5734-b425-575de81fc1eb",
      "name": "Publication · Overview and setup",
      "type": "n8n-nodes-base.stickyNote",
      "typeVersion": 1,
      "position": [
        -800,
        0
      ],
      "parameters": {
        "content": "# get elastic alert and send email notification and receive schedule events\n\n## Purpose and structure\nThis folder contains the **get elastic alert and send email notification and receive schedule events** workflow. Its executable nodes use `httpRequest`, `if`, `noOp`, `scheduleTrigger`, `splitInBatches`. The table and connection map below are derived from the JSON, not an inferred guarantee of behavior.\n\n## Setup\nImport inactive. Configure your own credentials and replace REPLACE_WITH_* values. Review external destinations and Code nodes before running.\n\n## Entry points\nSchedule Trigger\n\n## Verification\nSanitized source candidate; not runtime-tested. This overview is generated from node metadata. Read the folder README for the connection map, credential types, and license.\n\n## Attribution\nhttps://github.com/Zie619/n8n-workflows/blob/94007c1445d9258a7da116646b79473e7c7c3282/workflows/Http/0624_HTTP_Schedule_Send_Scheduled.json\nMIT; preserve source notices.",
        "width": 700,
        "height": 800,
        "color": 1
      }
    }
  ],
  "connections": {
    "Schedule Trigger": {
      "main": [
        [
          {
            "node": "Get PRISM Elastic Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Response is not empty": {
      "main": [
        [
          {
            "node": "Loop Over Each Alert Items",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "No Operation, do nothing",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get PRISM Elastic Alert": {
      "main": [
        [
          {
            "node": "Response is not empty",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Send Email Notification": {
      "main": [
        [
          {
            "node": "Loop Over Each Alert Items",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Loop Over Each Alert Items": {
      "main": [
        [
          {
            "node": "No Operation, end of loop",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Send Email Notification",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false
}