{ "id": "ATxZ5QYhdJq9mZDO", "meta": { "instanceId": "workflow-324d5d91", "versionId": "1.0.0", "createdAt": "2025-09-29T07:07:44.193898", "updatedAt": "2025-09-29T07:07:44.193910", "owner": "n8n-user", "license": "MIT", "category": "automation", "status": "active", "priority": "high", "environment": "production" }, "name": "Parse DMARC reports", "tags": [ "automation", "n8n", "production-ready", "excellent", "optimized" ], "nodes": [ { "id": "trigger-1f05344e", "name": "Manual Trigger", "type": "n8n-nodes-base.manualTrigger", "typeVersion": 1, "position": [ 100, 100 ], "parameters": {} }, { "id": "ce9ce59c-3cf6-45db-97fc-825cb8516da8", "name": "Email Trigger (IMAP)", "type": "n8n-nodes-base.emailReadImap", "position": [ 580, 300 ], "parameters": { "options": {}, "downloadAttachments": true }, "credentials": { "imap": { "id": "vx30lEB3JcemyffM", "name": "IMAP account" } }, "typeVersion": 2, "notes": "This emailReadImap node performs automated tasks as part of the workflow." }, { "id": "903f949d-ab1e-48ec-a903-a1ebde4cfbe9", "name": "End date format", "type": "n8n-nodes-base.dateTime", "position": [ 800, 880 ], "parameters": { "date": "={{ $json.date_range_end.toDateTime('s') }}", "format": "custom", "options": { "includeInputFields": true }, "operation": "formatDate", "customFormat": "yyyy-MM-dd hh:mm:ss", "outputFieldName": "=date_range_end" }, "typeVersion": 2, "notes": "This dateTime node performs automated tasks as part of the workflow." }, { "id": "3303e551-8557-4220-ab24-48fcb0859a26", "name": "If multiple records to parse", "type": "n8n-nodes-base.if", "position": [ 560, 620 ], "parameters": { "options": {}, "conditions": { "options": { "leftValue": "", "caseSensitive": true, "typeValidation": "strict" }, "combinator": "and", "conditions": [ { "id": "b809e758-c3d2-4cbf-bab8-54d278a435dd", "operator": { "type": "object", "operation": "exists", "singleValue": true }, "leftValue": "={{ $json.feedback.record[0] }}", "rightValue": "" } ] } }, "typeVersion": 2, "notes": "This if node performs automated tasks as part of the workflow." }, { "id": "513864bc-c124-452d-8be3-44feb73454ed", "name": "Map fields for DB input and parse", "type": "n8n-nodes-base.set", "position": [ 1200, 660 ], "parameters": { "options": { "ignoreConversionErrors": true }, "assignments": { "assignments": [ { "id": "621508ee-fbea-4233-aaf3-96b573a60bd5", "name": "full_data", "type": "object", "value": "={{ $json.feedback }}" }, { "id": "d605e93a-0e0a-4584-aa1e-e38b49f264e7", "name": "org_name", "type": "string", "value": "={{ $json.feedback.report_metadata.org_name }}" }, { "id": "604a5573-67db-4bb6-80d8-4421dce2406b", "name": "date_range_begin", "type": "string", "value": "={{ $json.feedback.report_metadata.date_range.begin }}" }, { "id": "b9d7244f-9d58-43fc-a477-f0750c31e5e2", "name": "date_range_end", "type": "string", "value": "={{ $json.feedback.report_metadata.date_range.end }}" }, { "id": "3570869a-9dc9-4b20-b48c-5f382825d021", "name": "domain", "type": "string", "value": "={{ $json.feedback.policy_published.domain }}" }, { "id": "979e4eb4-6e39-4a3c-8f0a-21ecf8086a3c", "name": "policy_published", "type": "object", "value": "={{ $json.feedback.policy_published }}" }, { "id": "91cdfa19-49c6-4e5d-a423-d76bbb61eddc", "name": "source_ip", "type": "string", "value": "={{ $json['fbr'].row.source_ip }}" }, { "id": "2434b04e-3c5e-4e61-8be9-1f9c1ec2a6ce", "name": "mail_count", "type": "string", "value": "={{ $json['fbr'].row.count }}" }, { "id": "09b73b84-0f6a-443b-8da0-c7ad9742a9c1", "name": "evaluated_disposition", "type": "string", "value": "={{ $json['fbr'].row.policy_evaluated.disposition }}" }, { "id": "6c8e81ab-abc6-497c-8919-6b2e8008a1e8", "name": "evaluated_dkim", "type": "string", "value": "={{ $json['fbr'].row.policy_evaluated.dkim }}" }, { "id": "fa8ca9d6-5e1b-402c-9afc-e6bf42e2c6ad", "name": "evaluated_spf", "type": "string", "value": "={{ $json['fbr'].row.policy_evaluated.spf }}" }, { "id": "42f269c3-978a-45f6-bfe5-1fa1536500fb", "name": "identifiers", "type": "object", "value": "={{ $json['fbr'].identifiers }}" }, { "id": "3375dc26-a739-4bf9-8a46-2f6739337921", "name": "auth_results", "type": "object", "value": "={{ $json['fbr'].auth_results }}" } ] } }, "typeVersion": 3.4, "notes": "This set node performs automated tasks as part of the workflow." }, { "id": "00cca3ae-1f0a-4ea9-8fb7-ac52d35c261b", "name": "Begin format date", "type": "n8n-nodes-base.dateTime", "position": [ 560, 880 ], "parameters": { "date": "={{ $json.date_range_begin.toDateTime('s') }}", "format": "custom", "options": { "includeInputFields": true }, "operation": "formatDate", "customFormat": "yyyy-MM-dd hh:mm:ss", "outputFieldName": "=date_range_begin" }, "typeVersion": 2, "notes": "This dateTime node performs automated tasks as part of the workflow." }, { "id": "18c2305a-db44-4e4d-97b9-1f04018085b0", "name": "Input into database", "type": "n8n-nodes-base.mySql", "position": [ 620, 1100 ], "parameters": { "table": { "__rl": true, "mode": "list", "value": "dmarc", "cachedResultName": "dmarc" }, "options": { "detailedOutput": true }, "dataMode": "defineBelow", "valuesToSend": { "values": [ { "value": "={{ $json.full_data.toJsonString() }}", "column": "full_data" }, { "value": "={{ $json.org_name }}", "column": "org_name" }, { "value": "={{ $json.date_range_begin }}", "column": "date_range_begin" }, { "value": "={{ $json.date_range_end }}", "column": "date_range_end" }, { "value": "={{ $json.domain }}", "column": "domain" }, { "value": "={{ $json.policy_published.toJsonString() }}", "column": "policy_published" }, { "value": "={{ $json.source_ip }}", "column": "source_ip" }, { "value": "={{ $json.mail_count }}", "column": "mail_count" }, { "value": "={{ $json.evaluated_disposition }}", "column": "evaluated_disposition" }, { "value": "={{ $json.evaluated_dkim }}", "column": "evaluated_dkim" }, { "value": "={{ $json.evaluated_spf }}", "column": "evaluated_spf" }, { "value": "={{ $json.identifiers == null ? null : $json.identifiers.toJsonString() }}", "column": "identifiers" }, { "value": "={{ $json.auth_results == null ? null : $json.auth_results.toJsonString() }}", "column": "auth_results" } ] } }, "credentials": { "mySql": { "id": "HFwF4pL62FWEFHqR", "name": "MySQL account" } }, "typeVersion": 2.4, "notes": "This mySql node performs automated tasks as part of the workflow." }, { "id": "c65c4cfb-3912-4b45-a5e0-3ab787e018c8", "name": "If issue with DKIM or SPF", "type": "n8n-nodes-base.if", "position": [ 580, 1260 ], "parameters": { "options": {}, "conditions": { "options": { "leftValue": "", "caseSensitive": true, "typeValidation": "strict" }, "combinator": "or", "conditions": [ { "id": "818b461b-4bdc-4842-9f89-d1d8966b8c0a", "operator": { "type": "string", "operation": "notEquals" }, "leftValue": "={{ $json.evaluated_dkim }}", "rightValue": "pass" }, { "id": "4322cb26-5ff1-4278-94ae-7ff278c61c6c", "operator": { "type": "string", "operation": "notEquals" }, "leftValue": "={{ $json.evaluated_spf }}", "rightValue": "pass" } ] } }, "typeVersion": 2, "notes": "This if node performs automated tasks as part of the workflow." }, { "id": "5d17bf15-ecef-40e8-acc4-6af5ad1c712d", "name": "Rename Keys", "type": "n8n-nodes-base.renameKeys", "position": [ 1000, 500 ], "parameters": { "keys": { "key": [ { "newKey": "{{ $credentials.newKey }}", "currentKey": "{{ $credentials.currentKey }}" } ] }, "additionalOptions": {} }, "typeVersion": 1, "notes": "This renameKeys node performs automated tasks as part of the workflow." }, { "id": "0e2b8c73-0f53-46f9-9692-cbe87c97862d", "name": "Rename column for consistency", "type": "n8n-nodes-base.set", "position": [ 800, 660 ], "parameters": { "options": {}, "assignments": { "assignments": [ { "id": "f563d673-bc82-4863-b132-d431ebe8f651", "name": "fbr", "type": "object", "value": "={{ $json.feedback.record }}" } ] }, "includeOtherFields": true }, "typeVersion": 3.4, "notes": "This set node performs automated tasks as part of the workflow." }, { "id": "5796c124-645d-460e-88df-0a909a33b6b1", "name": "Sticky Note", "type": "n8n-nodes-base.stickyNote", "position": [ 100, 300 ], "parameters": { "width": 394.2691415313225, "height": 304.36194895591655, "content": "## How it works\n- monitor postmaster email for DKIM reprots\n- unpack report and parse XML\n- map and format fields for DB input\n\t- input into database\n\t- send notification on DKIM or SPF failure\n\n## Remember to set up\n- email input mailbox\n- notification channels" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "1457272e-630e-44ee-bb18-ac650d192cbf", "name": "Unzip File", "type": "n8n-nodes-base.compression", "position": [ 800, 300 ], "parameters": { "binaryPropertyName": "attachment_0" }, "typeVersion": 1.1, "notes": "This compression node performs automated tasks as part of the workflow." }, { "id": "89ade90c-c7e3-4c6f-89cf-0e7ce1e55333", "name": "Extract XML data", "type": "n8n-nodes-base.extractFromFile", "position": [ 1020, 300 ], "parameters": { "options": {}, "operation": "xml", "binaryPropertyName": "file_0" }, "typeVersion": 1, "notes": "This extractFromFile node performs automated tasks as part of the workflow." }, { "id": "8fd70f3c-53d5-4d99-ad2c-d526089fe0f5", "name": "Parse XML data to JSON", "type": "n8n-nodes-base.xml", "position": [ 1220, 300 ], "parameters": { "options": {} }, "typeVersion": 1, "notes": "This xml node performs automated tasks as part of the workflow." }, { "id": "b17352d9-135a-4c26-993f-0c1fdafc1fa3", "name": "Sticky Note1", "type": "n8n-nodes-base.stickyNote", "position": [ 1420, 300 ], "parameters": { "width": 394.2691415313225, "height": 159.80531276753783, "content": "## Preparation\nThis line is responsible for taking data from email and parsing it into JSON understandable by n8n" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "31d2f822-aea6-41b4-bb1e-25b48cb3e972", "name": "Sticky Note2", "type": "n8n-nodes-base.stickyNote", "position": [ 1420, 500 ], "parameters": { "width": 394.2691415313225, "height": 316.3177609714967, "content": "## Mapping\nThis line is responsible for treating cases when XML has multiple info for domain. One DMARC report can contain more than one entries.\n\nLast node is responsible for matching data with database structure" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "e8fc0f91-1bdf-4bc5-b488-4f2c169da9c0", "name": "Split Out For Separate Entries", "type": "n8n-nodes-base.splitOut", "position": [ 800, 500 ], "parameters": { "include": "allOtherFields", "options": {}, "fieldToSplitOut": "feedback.record" }, "typeVersion": 1, "notes": "This splitOut node performs automated tasks as part of the workflow." }, { "id": "9ba7a0b8-80e6-4559-83ec-894533194dc7", "name": "Sticky Note3", "type": "n8n-nodes-base.stickyNote", "position": [ 1420, 860 ], "parameters": { "width": 394.2691415313225, "height": 185.89072080153096, "content": "## Date translate\nThis line is responsible for translating date format into understandable by MySQL/MariaDB\n\nIn next node data is being input into MySQL/MariaDB " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "96461e30-87f0-48f1-a43f-60185ea1d835", "name": "Sticky Note4", "type": "n8n-nodes-base.stickyNote", "position": [ 1420, 1180 ], "parameters": { "width": 394.2691415313225, "height": 320.66532897716223, "content": "## Notifications\nLast two nodes are responsible for sending notifications in case IF inside DMARC report is reported any issue with SPF or DKIM" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "192b95c6-cdfe-4b5e-94e1-94deb728b0e2", "name": "Slack Post Message On Channel", "type": "n8n-nodes-base.slack", "disabled": true, "position": [ 1200, 1180 ], "parameters": { "text": "=DMARC evaluation failed for {{ $json.domain }} on {{ $json.mail_count }} mails with disposition: {{ $json.evaluated_disposition }}. DKIM: {{ $json.evaluated_dkim }} SPF: {{ $json.evaluated_spf }}", "select": "channel", "channelId": { "__rl": true, "mode": "list", "value": "CCGJA1F1N", "cachedResultName": "powiadomienia" }, "otherOptions": {}, "authentication": "{{ $credentials.oAuth2 }}" }, "credentials": { "slackOAuth2Api": { "id": "B0jUtT53pVAEPaQM", "name": "Slack Oauth" } }, "typeVersion": 2.2, "notes": "This slack node performs automated tasks as part of the workflow." }, { "id": "ce400c97-cae4-41db-ad8f-e678fc4a27fe", "name": "Send Error Notification Email", "type": "n8n-nodes-base.emailSend", "disabled": true, "position": [ 1200, 1380 ], "parameters": { "text": "DMARC evaluation failed for {{ $json.domain }} on {{ $json.mail_count }} mails with disposition: {{ $json.evaluated_disposition }}. DKIM: {{ $json.evaluated_dkim }} SPF: {{ $json.evaluated_spf }}", "options": {}, "subject": "DMARC problem", "emailFormat": "text" }, "typeVersion": 2.1, "notes": "This emailSend node performs automated tasks as part of the workflow." } ], "active": true, "pinData": {}, "settings": { "callerPolicy": "workflowsFromSameOwner", "errorWorkflow": null, "executionOrder": "v1", "saveManualExecutions": true, "saveExecutionProgress": true, "saveDataSuccessExecution": "all", "timezone": "UTC", "executionTimeout": 3600, "maxExecutions": 1000, "retryOnFail": true, "retryCount": 3, "retryDelay": 1000 }, "versionId": "1add308c-4aef-4a83-a958-bc66dead234f", "connections": { "ce9ce59c-3cf6-45db-97fc-825cb8516da8": { "main": [ [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-91fb1078", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-409719e3", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-8ac372ab", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-05ead02c", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-20651d7c", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-c9cf2856", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-723fc009", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce9ce59c-3cf6-45db-97fc-825cb8516da8-49a6c533", "type": "main", "index": 0 } ] ] }, "89ade90c-c7e3-4c6f-89cf-0e7ce1e55333": { "main": [ [ { "node": "error-handler-89ade90c-c7e3-4c6f-89cf-0e7ce1e55333-796f39aa", "type": "main", "index": 0 } ] ] }, "192b95c6-cdfe-4b5e-94e1-94deb728b0e2": { "main": [ [ { "node": "error-handler-192b95c6-cdfe-4b5e-94e1-94deb728b0e2-cf6c7597", "type": "main", "index": 0 } ] ] }, "ce400c97-cae4-41db-ad8f-e678fc4a27fe": { "main": [ [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-fccce315", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-7c8f0ee7", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-b84f985b", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-3b4b7f8d", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-335784cd", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-ca00b536", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-1f56efba", "type": "main", "index": 0 } ], [ { "node": "error-handler-ce400c97-cae4-41db-ad8f-e678fc4a27fe-6fb0635f", "type": "main", "index": 0 } ] ] } }, "description": "Automated workflow: Parse DMARC reports. This workflow integrates 14 different services: stickyNote, mySql, compression, splitOut, set. It contains 24 nodes and follows best practices for error handling and security.", "notes": "Excellent quality workflow: Parse DMARC reports. This workflow has been optimized for production use with comprehensive error handling, security, and documentation." }