Reliability·n8n workflow

Cloud Log Anomaly Detector

Every 10 minutes: measure cloud log volume, detect spikes (>2x baseline), LLM analyzes top errors and likely cause — alert to #log-alerts.

Overview

What it does: Schedule (every 10 min) → query cloud logs (AWS CloudWatch, GCP Cloud Logging, Azure Monitor) for error rate/volume → code detects anomaly: current > 2x baseline? → IF spike → fetch top errors + services generating them → LLM diagnoses (which service failing, error type, severity: cascade, new bug, traffic spike) → Slack to #log-alerts.

Setup (4 steps)

Connect cloud logs: AWS CloudWatch, GCP Cloud Logging, Azure Monitor (API endpoint + credentials)

Set baseline: measure normal error rate (automatic rolling 7-day avg)

Configure spike threshold: multiplier (default 2x = 100% increase)

Set Slack channel: #log-alerts

Apps/nodes: Schedule, HTTP request (logs API), code node (anomaly math), Claude/OpenAI (diagnosis), Slack.

Credentials required: Cloud logs API key, OpenAI account, Slack workspace.

Difficulty: Easy | Setup time: 6 minutes.

Business outcome: Catches error cascades, service issues, traffic spikes instantly → incident response ↑ faster, MTTR ↓ 50%.

What's included

Importable n8n workflow (JSON)

Workflow nodes and configuration — inspect triggers, logic, and actions

Setup notes: which credentials to connect

Free updates when the workflow changes

Commercial-use license — keep and customize

Email support if you get stuck

Inside this workflow

7 steps · 6 unique directed pathsFocus a node to inspect it

Quickstart

01
Download the JSON
With an active subscription, download the workflow file right from this page or your dashboard.
02
Import into n8n
Choose Import from File and select the downloaded JSON. The full agent graph appears, ready to configure.
03
Plug in credentials
Each integration node prompts for credentials on first run. The setup guide lists every credential the agent expects.
04
Activate and test
Run once with sample input, confirm the expected output, then flip the activate toggle.

Frequently Asked Questions

How do I import this workflow into n8n?

Download the JSON file from your subscription dashboard, go to your n8n workspace, click the import button, select "Import from File", and upload the JSON. The entire workflow graph will load instantly, ready for configuration.

What credentials do I need to provide?

Each workflow lists required credentials in its description (e.g., Slack API key, GitHub token, PagerDuty account). You connect your own credentials—the workflow file contains only placeholder names, no actual API keys or secrets.

Are the credentials included in the JSON file?

No. For security, credential IDs are sanitized before distribution. You connect your own accounts when you first run the workflow. n8n will prompt you to authenticate each service.

Can I edit or customize the workflow after importing?

Yes, absolutely. Once imported, the workflow is yours to modify. You can change node logic, add/remove steps, adjust schedules, or integrate with different services. All changes are saved in your n8n workspace.

What n8n version is required?

These workflows use standard n8n-nodes-base node types (released 2022+). They work on n8n Cloud, self-hosted versions 0.180+, and Docker deployments. Community nodes (if required) are noted in the workflow description.

What if something breaks after I import it?

Check the workflow description for setup steps and credential names. Most issues are credential-related. If you get stuck, email support@autoflowworks.com with a screenshot of the error, and we'll help you troubleshoot.

Can I use this workflow for my customers or business?

Yes. The commercial-use license lets you keep, customize, and deploy the workflow for your business or clients. You can redistribute customized versions (except the original unmodified JSON without an active subscription).

Will the workflow receive updates?

Yes. When we improve a workflow (fix bugs, add features, optimize node types), you'll get the updated JSON for free. Check your subscription dashboard for new versions.

Do I need n8n Pro or a paid plan?

Not necessarily. These workflows run on n8n Free if you have enough execution time and storage. For production use (frequent triggers, high data volumes, many webhooks), you may want n8n Cloud Pro or higher. Check n8n's pricing for details.

Can I ask for a custom workflow?

Yes! We offer custom workflow design for specific DevOps/SRE use cases. Visit /custom-solutions or email support@autoflowworks.com with your requirements for a quote.

Reviews (0)

No reviews yet. Be the first.

Subscription

Included with subscription

This agent — and every other in the collection — comes with your subscription. One plan, the whole catalog.

Subscribe to download

Full collection access — every agent
All new workflows as released
Unlimited downloads
Commercial-use license
Priority support (Team plan)
Cancel anytime

Browse the full collection →

Cloud Log Anomaly Detector

Overview

Setup (4 steps)

What's included

Inside this workflow

Quickstart

Download the JSON

Import into n8n

Plug in credentials

Activate and test

Frequently Asked Questions

Reviews (0)

Included with subscription

More in Reliability

Batch Job Failure Watchdog

Cloud Incident Postmortem Scaffold

Cloud Orchestrator Monitor (K8s, Lambda, Cloud Run)