Coordinate outage incident response with Postgres, Slack, and email

Go to Workflow
0 views
Built by Oneclick AI Squad Oneclick AI Squad
Created on October 10, 2026

Description

Quick overview
This workflow turns monitoring alerts into coordinated incident response by tracking incidents in Postgres, creating Slack war-room channels, paging responders via email, escalating if nobody acknowledges, sending periodic status updates, and closing incidents with resolution notifications.

How it works
Receives incident alerts via the POST /bc-alert webhook (simple JSON or Prometheus Alertmanager) and normalizes them into a standard service, severity, and status format.
Creates a new incident in Postgres or attaches the alert to the existing open incident for the same service, then returns a 202 response with the incident ID and deduplication status.
For new incidents, loads service metadata and team contacts from Postgres, creates a Slack war-room channel, posts an incident brief and checklist, and emails each responder a unique acknowledgement link.
Accepts the first responder acknowledgement via GET /bc-ack, updates the incident in Postgres, responds to the request, and posts a Slack message naming the incident commander.
Runs every 5 minutes to find unacknowledged incidents that need escalation and open incidents that are due for status updates, then sends escalation emails/Slack notices or posts Slack and email stakeholder updates.
Accepts incident resolution via POST /bc-resolve, marks the incident resolved in Postgres, responds to the request, posts the resolution and duration to Slack, and emails stakeholders (and executives for SEV1) with the post-incident review due date.

Setup
Add credentials for Postgres, SMTP email (n8n Email node), and Slack API HTTP Header Auth (Bearer token) with at least channels:manage and chat:write scopes.
Run the workflow once with the manual trigger to create the Postgres tables and seed the demo team/service data.
Update the configuration values in Set Continuity Config (public webhook base URL, sender email, default Slack channel ID, escalation contacts, stakeholder lists, and acknowledgement/status update timings).
Replace the demo teams and services in Postgres (or in the setup SQL) with your real service IDs, owner/dependent teams, customer-facing flags, and runbook URLs/steps.
Configure your monitoring system to send alerts to the production webhook URL for POST /bc-alert, and use POST /bc-resolve plus the emailed/posted GET /bc-ack links during incident response.

This workflow was created by Oneclick AI Squad and shared publicly on the n8n community template library. n8nFind indexes it for discovery — the workflow remains the property of its original creator.

Nodes Used (4)

Code
n8n-nodes-base.code
HTTP Request
n8n-nodes-base.httpRequest
Postgres
n8n-nodes-base.postgres
Send Email
n8n-nodes-base.emailSend