Announcing network flow logs and log streaming
Blog post from Tailscale
Tailscale has introduced network flow logs in beta as a part of its commitment to enhancing network security and reliability. These logs provide detailed metadata about network traffic, allowing users to detect threats, investigate incidents, maintain compliance, and troubleshoot issues without compromising the end-to-end encryption of data. Administrators can enable and access these logs through the admin console, with options for streaming to SIEM systems like Splunk and ELK for comprehensive monitoring and alert setups. The feature is available on Tailscale's Premium and Enterprise plans, with log streaming specifically offered to Enterprise users, and the company is working on expanding integration with additional SIEM partners.