loghead

An open source, self-hosted backend for collecting logs and metrics from Tailscale clients.

Features

• ✅ Client logs
• 🚧 Client Metrics aggregation
• 🚧 SSH session recording
• ❌ Network flow logs (Won't be supported - buy Tailscale instead)

Running loghead

• Configure loghead
• Configure the components
  • See the SSH session recording documentation for further information. TL;DR: Patches to the control plane are required.
  • Client logs: configuration of the tailscale daemon is required. Set the environment variable TS_LOG_TARGET to the address of loghead. On systemd systems you might be able to set this in /etc/default/tailscaled.
  • See the Client metrics documentation for further information.
• Run loghead natively or in a container.

Documentation

The documentation can be found in the docs/ folder.