NKSC NIVS Cyber Incident Reports via n8n Webhook + XLSX

Instantly submit NKSC NIVS cyber incident reports from an n8n webhook (with XLSX support)

This n8n workflow example receives cyber incident data via an n8n Webhook, optionally parses an uploaded XLSX file into a normalized incident payload, and then submits the report to NKSC NIVS using the NKS C NIVS community node—returning clear success or error JSON back to the caller.

What this workflow does

• Receives a POST request through an n8n webhook and checks whether the request includes an uploaded file.
• If an XLSX file is provided, it extracts spreadsheet rows and parses them into a normalized incident payload, including required field mapping and date formatting.
• Merges fields from the file-derived values (or falls back to the provided request body) into a single incident payload containing the incident type and mapped fields.
• Routes by report type and submits each report to NKSC NIVS as an Initial Warning, Minor Incident, Major Incident, or Near Miss.
• Validates the NKSC NIVS response: if submission fails, it immediately returns an error JSON response to the webhook caller.
• On success, it returns a JSON success message for direct-field requests, or converts the result to an XLSX file and returns it as a binary download for file-based requests.

Use cases

• Connect your service desk or incident-management tool to NKSC NIVS with a webhook-based ingestion endpoint.
• Allow analysts to submit batches of incidents via XLSX uploads, with consistent field normalization and date formatting.
• Automate NKSC NIVS reporting across environments by routing outcomes based on report type.

Technical details

• Requires installing the @synergyconsulting/n8n-nodes-nksc-nivs community node on a self-hosted n8n instance.
• Configure valid NKSC NIVS credentials and use the webhook URL from the webhook trigger.
• Uses workflow logic nodes such as webhook, if, code, merge, and switch (with supporting elements like sticky notes).