Automated Wazuh rule deployment pipeline with GitHub, XML validation & Telegram alerts

by mariskarthick ✓ · 237 views · created 2025-08-10 · SecOps, Multimodal AI

What this workflow does

This workflow has 14 nodes and runs on Github events. Along the way it connects GitHub and Telegram.

How it runs

Trigger: On Github events.

1. Valid Commit for Deployment (If): checks a condition and branches into true / false
2. Extract Changed Files (Code): runs custom JavaScript code
3. Download Rule (HTTP Request): calls an HTTP API
4. Upload a file (SSH): uses SSH
5. Rule Validation (SSH): uses SSH
6. Rule Validation check (If): checks a condition and branches into true / false
7. Deploying the Rules (SSH): uses SSH
8. Rules deployment failed (Telegram): uses Telegram
9. Restart Wazuh_manager (SSH): uses SSH
10. Final Confirmation check (If): checks a condition and branches into true / false

…plus 2 more steps. See the full node list below.

Services it uses

GitHubTelegram

Before you upgrade to n8n 3.0

Nodes used (7)

• Github Triggern8n-nodes-base.githubTrigger
• Coden8n-nodes-base.code
• HTTP Requestn8n-nodes-base.httpRequest
• SSHn8n-nodes-base.ssh
• Telegramn8n-nodes-base.telegram
• No Operation, do nothingn8n-nodes-base.noOp
• Ifn8n-nodes-base.if

From the author

🚀 Say Goodbye to Manual Rule Deployments in Wazuh! Just Commit— Let Your Pipeline Auto‑Deploy via GitHub + n8n 🎯 👨‍💻 Tired of This Endless Cycle? Create rule → Validate → Copy to server → Restart Wazuh → Notify team Repeat that every week — you’re…

View the original on n8n.io → Check your own copy