Curated

(5/5)

Automate SIEM Alert Enrichment with MITRE ATT&CK, Qdrant & Zendesk in n8n

![n8n](https://uploads.n8n.io/templates/qdrantlogo.png) Embed your Vector Store To provide data for your Vector store, you need to pass it in as JSON, and ensure it's setup correctly. This flow pulls the JSON file from Google Drive and extracts the JSON data and then passes it into the qdrant collection.

Integrations Used (11)

Documentdefaultdataloader

Textsplittertokensplitter

Memorybufferwindow

Outputparserstructured

Google Drive

Vectorstoreqdrant

Zendesk

Workflow Structure (23 nodes)

100%

Zendesk

Get all Zendesk Tickets

Split In Batches

Loop Over Items

Langchain.lm Chat Open Ai

OpenAI Chat Model1

Langchain.agent

AI Agent1

Langchain.embeddings Open Ai

Embeddings OpenAI

Langchain.vector Store Qdrant

Qdrant Vector Store query

Langchain.output Parser Structured

Structured Output Parser

Zendesk

Update Zendesk with Mitre Data

No Op

Move on to next ticket

Manual Trigger

When clicking ‘Test workflow’

Google Drive

Pull Mitre Data From Gdrive

Extract From File

Extract from File

Langchain.chat Trigger

When chat message received

Langchain.lm Chat Open Ai

OpenAI Chat Model

Split Out

Langchain.agent

AI Agent

Langchain.embeddings Open Ai

Embeddings OpenAI1

Langchain.memory Buffer Window

Window Buffer Memory

Langchain.vector Store Qdrant

Embed JSON in Qdrant Collection

Langchain.vector Store Qdrant

Query Qdrant Vector Store

Langchain.document Default Data Loader

Default Data Loader

Langchain.text Splitter Token Splitter

Token Splitter1

Langchain.embeddings Open Ai

Embeddings OpenAI2

Node Types:

trigger

default

logic

action

Requires credentials

Prerequisites

Required Credentials (4)

Google Drive

Used by: Pull Mitre Data From Gdrive

Docs

OpenAI

Used by: OpenAI Chat Model, Embeddings OpenAI1 +3 more

Docs

Qdrant

Used by: Embed JSON in Qdrant Collection, Query Qdrant Vector Store +1 more

Docs

Zendesk

Used by: Get all Zendesk Tickets, Update Zendesk with Mitre Data

Docs

Multiple services required

This workflow needs 4 different credentials. Make sure you have accounts for all services before importing.

Complexity

Advanced

Expert level. Custom code, complex logic, many integrations.

Setup time: ~55 min

Score: 70/100

Loops

5 Integrations

When to Use This Workflow

Real-time Response

React instantly when events happen - new orders, form submissions, or API calls.

Zero delay between trigger and action for time-sensitive workflows.

Time Savings

Replace repetitive manual tasks with reliable automation.

Reclaim hours every week for higher-value work.

Error Reduction

Eliminate human error from routine processes with consistent automation.

Improve accuracy and reliability across your workflows.

workflow.json

{
  "meta": {
    "instanceId": "cb484ba7b742928a2048bf8829668bed5b5ad9787579adea888f05980292a4a7",
    "templateCredsSetupCompleted": true
  },
  "nodes": [
    {
      "id": "86ddd018-3d6b-46b9-aa93-dedd6c6b5076",
      "name": "When chat message received",
      "type": "@n8n/n8n-nodes-langchain.chatTrigger",
      "position": [
        -880,
        360
      ],
      "webhookId": "a9668bb8-bbe8-418a-b5c9-ff7dd431244f",
      "parameters": {
        "options": {}
      },
      "typeVersion": 1.1
    },
...