Connect Axiom with Tailscale
Integrating Axiom with Tailscale allows you to stream your audit and network flow logs directly to Axiom seamlessly, unlocking powerful insights and analysis. Whether you’re conducting a security audit, optimizing performance, or ensuring compliance, Axiom’s Tailscale dashboard equips you with the tools to maintain a secure and efficient network, respond quickly to potential issues, and make informed decisions about your network configuration and usage.
Prerequisites#
-
Create a dataset in Axiom where you send your data.
-
Create an API token in Axiom with permissions to ingest data to the dataset you have created.
Setup#
- In Tailscale, go to the configuration logs page of the admin console.
- Add Axiom as a configuration log streaming destination in Tailscale. For more information, see the Tailscale documentation.
Tailscale dashboard#
Axiom displays the data it receives in a pre-built Tailscale dashboard that delivers immediate, actionable insights into your tailnet’s activity and health.
This comprehensive overview includes:
- Log type distribution: Understand the balance between configuration audit logs and network flow logs over time.
- Top actions and hosts: Identify the most common network actions and most active devices.
- Traffic visualization: View physical, virtual, and exit traffic patterns for both sources and destinations.
- User activity tracking: Monitor actions by user display name, email, and ID for security audits and compliance.
- Configuration log stream: Access a detailed audit trail of all configuration changes.
With these insights, you can:
- Quickly identify unusual network activity or traffic patterns.
- Track configuration changes and user actions.
- Monitor overall network health and performance.
- Investigate specific events or users as needed.
- Understand traffic distribution across your tailnet.