Actions85
- Assessment Actions
- Assessment Data File Actions
- Assessment Data File (Invited) Actions
- Assessment Event Actions
- Assessment Invite Actions
- Assessment Preference Actions
- Assessment Template Actions
- Chatter Actions
- End User Actions
- End User Watchlist Actions
- First Party Alert Actions
- First Party Watchlist Actions
- Leak File Search Actions
- Research Actions
- Third Party Alert Actions
- Third Party Watchlist Actions
Third Party Alert → Get Third Party Alerts
AI-generatedSummary
Fetches one page of third-party (vendor/supplier breach) alerts from the HackNotice API, optionally using a saved search's filters, extra JSON filters, and a time window.
Inputs
- Saved Search Name or ID — Pick a saved third-party search (or pass its JSON via expression). Its stored filters become the base request body. Empty means no saved filters.
- Limit by Time — None (default), Last Day, Last Week, Last Month, or Custom Date Range. Anything other than None strips the saved search's date fields and applies the chosen window. Last Day sets hours_ago=24. Last Week and Last Month set start_date to that date. Custom sets start_date and end_date.
- Start Date (required) — Shown only for Custom Date Range. Must be a valid date. Sent as YYYY-MM-DD.
- End Date (required) — Shown only for Custom Date Range. Must be a valid date. Sent as YYYY-MM-DD.
- Additional Filters — JSON object merged over the saved-search filters, so it wins on conflicts. Must be valid JSON and an object, otherwise the node errors. Limit by Time still overrides date fields.
- Page Number — Zero-based page index (default 0, minimum 0). The API page size is 50.
Output shape
One n8n item per alert returned for the requested page, each paired to its input item. Alert fields come straight from the API.
Only a single page is fetched, up to 50 alerts. Use Page Number to get more. The execute code also reads 'returnAll' and 'limit' parameters, but they are not exposed in this operation's UI, so the defaults apply (no auto-pagination, 50 items max). The request is POST to /hackalerts/page/{page}. If the response is wrapped, the items are taken from data, results or items.
Examples
Example 1: Pull this week's alerts from a saved search
Saved Search = 'Critical vendors', Limit by Time = Last Week, Page Number = 0
Example 2: Alerts for a custom date window with an extra filter
Limit by Time = Custom Date Range, Start/End dates set, Additional Filters = {"severity":"high"} (example key, depends on the API)
Example 3: Walk through later pages
Same settings, Page Number = 1, 2, … (e.g. driven by a loop)