Monitor Compliance with GPT-4 Analysis of System Logs and Generate Audit Reports

This n8n workflow automates the process of monitoring system logs for compliance, analyzing them using an AI agent (GPT-4), and generating audit reports. It simplifies the task of regularly checking system activity against compliance policies and provides actionable insights via email.

What it does

1. Schedules Execution: The workflow is triggered on a predefined schedule (e.g., daily, weekly) to initiate the compliance check.
2. Fetches System Logs: It makes an HTTP request to retrieve system logs from a specified endpoint.
3. Analyzes Logs with AI: An AI Agent (configured with an OpenAI Chat Model) processes the fetched logs to identify potential compliance issues based on a defined prompt.
4. Parses AI Output: The AI's response is parsed using a Structured Output Parser to extract relevant compliance findings and recommendations in a structured format.
5. Aggregates Data: The parsed compliance findings are aggregated into a single report.
6. Formats Audit Report: The aggregated data is then formatted into a readable audit report.
7. Conditional Emailing: It checks if any compliance issues were found.
   • If issues are found: An email containing the detailed audit report is sent to a designated recipient.
   • If no issues are found: A "No Issues Found" email is sent, or no email is sent depending on configuration.

Prerequisites/Requirements

• n8n Instance: A running n8n instance.
• OpenAI API Key: Required for the OpenAI Chat Model to analyze logs.
• System Log Endpoint: An accessible HTTP endpoint that provides system logs.
• Gmail Account: Configured as a credential in n8n to send audit reports.

Setup/Usage

1. Import the Workflow:
   • Download the provided JSON file.
   • In your n8n instance, go to "Workflows" and click "New".
   • Click the "Import from JSON" button and paste the workflow JSON or upload the file.
2. Configure Credentials:
   • OpenAI Chat Model (ID: 1153):
     • Click on the "OpenAI Chat Model" node.
     • Select or create a new "OpenAI API" credential. Enter your OpenAI API Key.
   • Gmail (ID: 356):
     • Click on the "Gmail" node.
     • Select or create a new "Gmail API" credential. Authenticate with your Google account.
3. Configure Nodes:
   • Schedule Trigger (ID: 839): Adjust the schedule as needed (e.g., daily, hourly, weekly).
   • HTTP Request (ID: 19):
     • Set the URL to your system log endpoint.
     • Configure any necessary Headers or Authentication for your log API.
   • AI Agent (ID: 1119):
     • Review and adjust the Prompt to guide the AI on what compliance aspects to look for in the system logs. Ensure it clearly defines what constitutes a compliance issue and what information should be extracted for the audit report.
   • Structured Output Parser (ID: 1179):
     • Define the expected Schema for the AI's output. This should match the structure you expect the AI to return (e.g., JSON with fields like complianceIssues, recommendations, severity).
   • Edit Fields (Set) (ID: 38):
     • Adjust the fields to include/exclude for the final audit report as needed.
   • If (ID: 20):
     • Modify the Conditions to accurately check for the presence of compliance issues in the AI's parsed output.
   • Gmail (ID: 356):
     • Set the To email address for the audit reports.
     • Customize the Subject and Body of the emails for both the "True" (issues found) and "False" (no issues) branches.
4. Activate the Workflow: Once configured, activate the workflow by toggling the "Active" switch in the top right corner of the n8n editor.