Create a queryable threat intelligence event log
Send the event fields available from Abuselpdb to a Notis webhook and insert them into your ClickHouse event table.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Execute ClickHouse Query
Runs a database query and returns the results.
Why this helps
Threat signals lose value when useful event details are not retained in a consistent format.
- Keep supplied threat events in a queryable store.
- Retain event attributes your source actually provides.
- Support later SQL analysis without manual re-entry.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and ClickHouse once in the Notis portal.
- 2Create an automation and name it for threat event logging.
- 3Tell Notis to insert the event fields supplied to the webhook into your existing ClickHouse event table.
- 4Pick the webhook trigger and choose where run reports go.
- 5Send one real event payload and inspect the stored record.
Questions about this workflow
Which threat fields are included?
Only the fields supplied by the webhook caller and supported by your destination table are available.
Can it enrich events with additional intelligence?
Not with the listed ClickHouse action alone. Include any enrichment in the webhook payload or use a separate upstream process.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to ClickHouse. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
ClickHouse actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Execute ClickHouse Query
Runs a database query and returns the results.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Database Schema
Retrieves an overview of a database's schema and tables.
Get Table Schema
Gets the schema and column details for a table.
Get ClickHouse Play Interface
Returns the ClickHouse Play interface for writing queries and viewing results.
List ClickHouse Databases
Lists the databases in an instance.
List ClickHouse Tables
Lists tables in databases with basic details.
Connect any two apps with Notis in the middle.
Abuselpdb and ClickHouse, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business ClickHouse.