Automated Alert Monitoring and Issue Creation Workflow

This n8n workflow automates the process of monitoring Elasticsearch for alerts, and creating work items in Azure DevOps if certain conditions are met. It is triggered daily at 12:15 PM via a cron schedule. The process begins with a cron trigger which initiates an Elasticsearch query to fetch recent alerts. The results of this query are then evaluated to determine if the number of alerts exceeds a predefined threshold. If the condition is true (i.e., there are more alerts than expected), the workflow proceeds to create a new work item (such as a task or bug report) in Azure DevOps via an API call. If the condition is false, the workflow simply ends without any action. This automation is useful for teams that want to keep track of alert volume and quickly generate work items for critical issues, ensuring prompt attention and resolution.