Look up records tied to enriched IP data
Turn an incoming IP into a searchable lead for relevant context already stored in Elasticsearch.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Query Index
Searches an Elasticsearch index for documents.
Why this helps
IP details are easy to lose between investigation tools and stored documents, creating extra context switching.
- Add Abstract IP enrichment to an existing record search.
- Bring matching stored documents into the same run report.
- Avoid manually switching between enrichment and search tools.
Setup
Build it in a few focused steps.
- 1Connect Abstract and Elasticsearch once in the Notis portal.
- 2Create an automation in Automations, New Automation, or tell Notis from any channel.
- 3In one instruction, ask Notis to enrich the webhook IP with Abstract and query a specified index for documents matching the IP or user-named related attributes.
- 4Pick the webhook trigger and choose where run reports should go.
- 5Test with one real IP and check that the requested search fields exist in the index.
Questions about this workflow
What should the webhook include?
Include the IP address and any additional context you want Notis to consider. Abstract's available IP enrichment results depend on its service response.
Can the workflow infer a baseline or history?
Only if that information is present in the Elasticsearch documents returned or supplied in the webhook. Otherwise, specify the required context.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abstract to Elasticsearch. A trigger fires from one place; an action lands in another.
Abstract triggers
Elasticsearch actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Index Schema
View the structure and field mappings of an index.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
List Indices
Lists available Elasticsearch indices.
Query Index
Searches an Elasticsearch index for documents.
Ping Cluster
Pings the cluster to check its connectivity and health.
Connect any two apps with Notis in the middle.
Abstract and Elasticsearch, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Elasticsearch.