Beehive is a modular event and agent automation system that enables users to create custom automated workflows triggered by various events across multiple platforms.
A flexible event/agent & automation system with lots of bees 🐝
Beehive is primarily used for security automation, incident response, and log analysis by enabling users to connect different event sources and automate actions accordingly. Security operations teams and DevOps professionals can leverage this tool to streamline monitoring, alerting, and response tasks by creating custom agents that react to events from services like Twitter, email, RSS feeds, and more.
When building from source, ensure that Beehive can locate its assets (images, JavaScript, CSS) to avoid UI issues. The modular Hive system allows for easy extension but requires configuration via the web UI or config files. Users should have a working Go environment if building from source. Running Beehive as a service behind a reverse proxy is recommended for production environments.
Clone the repository with: git clone --recursive https://github.com/muesli/beehive.git
Navigate into the directory: cd beehive
Build the project using make
Alternatively, download pre-built binaries for your platform from the releases page
For Arch Linux users, install via AUR package 'beehive'
Run using Docker with: docker run --name beehive -d -p 8181:8181 fribbledom/beehive
Use the Ansible role available at https://github.com/morbidick/ansible-role-beehive for automated deployment
Ensure Go 1.13 or higher is installed if building from sourcebeehive --help
Displays a full list of available command line options and usage instructions.
docker run --name beehive -d -p 8181:8181 fribbledom/beehive
Starts Beehive in a Docker container, exposing the web interface on port 8181.
make
Builds the Beehive binary from source after cloning the repository.
beehive
Runs the Beehive server; by default creates a configuration file 'beehive.conf' in the current directory.