Overview

This node operation retrieves a specific triage rule from the Binalyze AIR system. It is useful for workflows that need to fetch detailed information about a particular triage rule, such as for auditing, reporting, or further processing within an automation pipeline. For example, a security analyst might use this node to get the configuration of a triage rule to understand how alerts are being filtered or prioritized.

Use Case Examples

1. Retrieve a triage rule by selecting it from a list to review its settings.
2. Fetch a triage rule by its ID to use its details in a subsequent workflow step.

Properties

Output

JSON

• id - The unique identifier of the triage rule.
• name - The name of the triage rule.
• description - A description of what the triage rule does.
• criteria - The conditions or criteria defined in the triage rule.
• organizationId - The ID of the organization associated with the triage rule.
• createdAt - Timestamp when the triage rule was created.
• updatedAt - Timestamp when the triage rule was last updated.

Dependencies

• Requires an API key credential for Binalyze AIR to authenticate requests.

Troubleshooting

• If the triage rule ID is invalid or not found, the node will throw an error indicating the rule could not be retrieved. Verify the ID format and existence.
• If the organization filter is used incorrectly, it may result in no triage rules being found. Ensure the organization ID or name is correct.
• Authentication errors may occur if the API key credential is missing or invalid. Check the credential configuration in n8n.