{"slug":"logging-streaming-and-events","title":"Logging, streaming, and events","tags":["tailscale","logging"],"agent_summary":"Last validated: Feb 5, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Logging, streaming, and events\r\n\r\nLast validated: Feb 5, 2025\r\n\r\nManage the logs and events within your Tailscale network, known as a tailnet.\r\n\r\n## [Capture logs and events](https://tailscale.com/docs/reference/logging-streaming-events\\#capture-logs-and-events)\r\n\r\nYou can capture configuration changes to your tailnet as well as network traffic flow.\r\n\r\n[**Configuration audit logging** \\\\\r\n\\\\\r\nIdentify who did what, and when, to your tailnet configuration.](https://tailscale.com/docs/features/logging/audit-logging) [**Network flow logs** \\\\\r\n\\\\\r\nView networking telemetry for nodes in your Tailscale network.](https://tailscale.com/docs/features/logging/network-flow-logs)\r\n\r\n## [Stream logs and events to a SIEM or storage bucket](https://tailscale.com/docs/reference/logging-streaming-events\\#stream-logs-and-events-to-a-siem-or-storage-bucket)\r\n\r\nStream configuration audit logs and network flow logs to your preferred log streaming integration, such as a security information and event management (SIEM) system and Amazon S3 or S3-compatible storage buckets. You can also stream Tailscale SSH session recordings to another node in your tailnet or storage buckets.\r\n\r\n[**Log streaming** \\\\\r\n\\\\\r\nStream Tailscale logs to a security information and event management (SIEM) system, Amazon S3, and S3-compatible service.](https://tailscale.com/docs/features/logging/log-streaming) [**Tailscale SSH session recording** \\\\\r\n\\\\\r\nUse Tailscale SSH session recording to collect end-to-end encrypted recordings of Tailscale SSH sessions.](https://tailscale.com/docs/features/tailscale-ssh/tailscale-ssh-session-recording) [**Send Tailscale SSH session recordings to S3** \\\\\r\n\\\\\r\nConfigure an S3 backend for SSH session recording.](https://tailscale.com/docs/features/tailscale-ssh/how-to/session-recording-s3)\r\n\r\n## [Integrate log events with your infrastructure](https://tailscale.com/docs/reference/logging-streaming-events\\#integrate-log-events-with-your-infrastructure)\r\n\r\nUse webhooks to integrate log events with your infrastructure, such as with apps like Slack.\r\n\r\n[**Webhooks** \\\\\r\n\\\\\r\nSet up a webhook to receive notification of events on your Tailscale network.](https://tailscale.com/docs/features/webhooks)\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Logging, streaming, and events</h1>\n<p>Last validated: Feb 5, 2025</p>\n<p>Manage the logs and events within your Tailscale network, known as a tailnet.</p>\n<h2><a href=\"https://tailscale.com/docs/reference/logging-streaming-events#capture-logs-and-events\">Capture logs and events</a></h2>\n<p>You can capture configuration changes to your tailnet as well as network traffic flow.</p>\n<p><a href=\"https://tailscale.com/docs/features/logging/audit-logging\"><strong>Configuration audit logging</strong> \\\r\n\\\r\nIdentify who did what, and when, to your tailnet configuration.</a> <a href=\"https://tailscale.com/docs/features/logging/network-flow-logs\"><strong>Network flow logs</strong> \\\r\n\\\r\nView networking telemetry for nodes in your Tailscale network.</a></p>\n<h2><a href=\"https://tailscale.com/docs/reference/logging-streaming-events#stream-logs-and-events-to-a-siem-or-storage-bucket\">Stream logs and events to a SIEM or storage bucket</a></h2>\n<p>Stream configuration audit logs and network flow logs to your preferred log streaming integration, such as a security information and event management (SIEM) system and Amazon S3 or S3-compatible storage buckets. You can also stream Tailscale SSH session recordings to another node in your tailnet or storage buckets.</p>\n<p><a href=\"https://tailscale.com/docs/features/logging/log-streaming\"><strong>Log streaming</strong> \\\r\n\\\r\nStream Tailscale logs to a security information and event management (SIEM) system, Amazon S3, and S3-compatible service.</a> <a href=\"https://tailscale.com/docs/features/tailscale-ssh/tailscale-ssh-session-recording\"><strong>Tailscale SSH session recording</strong> \\\r\n\\\r\nUse Tailscale SSH session recording to collect end-to-end encrypted recordings of Tailscale SSH sessions.</a> <a href=\"https://tailscale.com/docs/features/tailscale-ssh/how-to/session-recording-s3\"><strong>Send Tailscale SSH session recordings to S3</strong> \\\r\n\\\r\nConfigure an S3 backend for SSH session recording.</a></p>\n<h2><a href=\"https://tailscale.com/docs/reference/logging-streaming-events#integrate-log-events-with-your-infrastructure\">Integrate log events with your infrastructure</a></h2>\n<p>Use webhooks to integrate log events with your infrastructure, such as with apps like Slack.</p>\n<p><a href=\"https://tailscale.com/docs/features/webhooks\"><strong>Webhooks</strong> \\\r\n\\\r\nSet up a webhook to receive notification of events on your Tailscale network.</a></p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}