An n8n workflow automation for incident management that receives monitoring alerts via Webhook, normalizes severity levels, and routes critical incidents to PagerDuty for on-call paging while posting to a Slack #ops channel. Non-critical alerts go to Slack only. All incidents are logged to Google Sheets for post-mortem analysis and uptime reporting.

Full FlowZap Code

alert { # Alert
n1: rectangle label:"Webhook - Monitoring Alert" system:"n8n"
n2: rectangle label:"Code - Normalize alert + severity mapping" system:"n8n"
n1.handle(right) -> n2.handle(left) [label="Alert payload"]
}

decision { # Decision
n3: diamond label:"IF: Severity = critical?" system:"n8n"
alert.n2.handle(right) -> decision.n3.handle(left) [label="Severity"]
}

response { # Response
n4: rectangle label:"Slack - Post Incident Alert (#ops)" system:"Slack"
n5: rectangle label:"HTTP Request - PagerDuty Create Incident" system:"API"
decision.n3.handle(right) -> response.n5.handle(left) [label="Yes → Page"]
response.n5.handle(right) -> response.n4.handle(left) [label="Pagerduty created"]
decision.n3.handle(bottom) -> response.n4.handle(top) [label="No → Slack only"]
}

audit { # Audit
n6: rectangle label:"Google Sheets - Append Row (Incident log)" system:"Google Sheets"
response.n4.handle(bottom) -> audit.n6.handle(top) [label="Log"]
}

Related templates